2025 matches found
CVE-2023-32760
An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication...
CVE-2023-32759
CVE-2023-32759 (Archer Platform) : The affected product is Archer Platform, prior to version 6.13. The issue allows an authenticated attacker to obtain sensitive information through a crafted URL. The root cause is not detailed in the provided documents beyond this exposure path. A fixed version ...
CVE-2023-32761
Cross Site Request Forgery CSRF vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to execute arbitrary code via a crafted request...
Archer Platform 跨站脚本漏洞
Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions prior to 6.13 that stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability. An attacker can exploit this vulnerability to execute...
PT-2023-25843 · Unknown · Archer Platform
Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Description: The issue allows an authenticated attacker to obtain sensitive information via the log files. Recommendations: For versions prior to 6.12.0.6, update to version 6.12.0.6 or later. For versio...
PT-2023-24007 · Rsa · Archer Platform
Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6 Description: The issue allows an authenticated attacker to obtain sensitive information via a crafted URL. Recommendations: For Archer Platform versions prior to 6.13,...
CVE-2023-37224
Archer Platform has a vulnerability (CVE-2023-37224) causing information disclosure via log files in versions prior to 6.13. It is fixed in 6.12.0.6 and 6.13.0. Upgrade to 6.12.0.6 or later (6.13.0 or newer) to remediate. The advisory does not specify exploitation details beyond authenticated acc...
PT-2023-25842 · Rsa · Archer Platform
Name of the Vulnerable Software and Affected Versions: Archer Platform versions prior to 6.13 Archer Platform version 6.12.0.6 Description: The issue is a Cross Site Scripting XSS vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted malicious script...
The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger a memory buffer overflow.
The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to trigger a memory buffer overflow...
TP-Link Archer AX21 Command Injection (CVE-2023-1389)
Binary data tplinkarcherax21cve-2023-1389.nbin...
The vulnerability of TP-Link Archer AX21 (AX1800)’s microprogramming software, related to synchronization errors when using a shared resource (“Race Situation”), allows a hacker to execute arbitrary code.
The vulnerability of TP-Link Archer AX21 AX1800’s microprogramming software is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...
New Condi Malware Hijacking TP-Link Wi-Fi Routers for DDoS Botnet Attacks
A new malware called Condi has been observed exploiting a security vulnerability in TP-Link Archer AX21 AX1800 Wi-Fi routers to rope the devices into a distributed denial-of-service DDoS botnet. Fortinet FortiGuard Labs said the campaign has ramped up since the end of May 2023. Condi is the work ...
PT-2023-5454 · Tp Link · Tp-Link Archer C20
Name of the Vulnerable Software and Affected Versions: TP-Link Archer C20 versions prior to Archer C20JP V1 230616 Description: The issue is related to improper authentication in the TP-Link Archer C20 firmware, which can be exploited by a network-adjacent unauthenticated attacker to execute...
TP-Link Archer AX10(EU)_V1.2_230220 Buffer Overflow Vulnerability
Exploit Title: Buffer Overflow in TP-Link Archer AX10EUV1.2230220 Exploit Author: Giuseppe Compare CVE: CVE-2023-34832 Vendor Homepage: https://www.tp-link.com/ Version: TP-Link Archer AX10EUV1.2230220 Buffer Overflow There is a buffer overflow in the FUN131e8 function due to using sprintf...
CVE-2023-34832
TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...
CVE-2023-34832
TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...
Buffer overflow
TP-Link Archer AX10EUV1.2230220 was discovered to contain a buffer overflow via the function FUN131e8 - 0x132B4...
TP-LINK Archer AX10 安全漏洞
The TP-LINK Archer AX10 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Archer AX10EUV1.2230220 version, which originates from a buffer overflow vulnerability contained in function FUN131e8 - 0x132B4...
