Stack overflow

A vulnerability was found in Totolink LR1200GB 9.1.0u.6619B20230130. It has been declared as critical. This vulnerability affects the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument sPort leads to stack-based buffer overflow. The attack can be...

PT-2024-1173 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: Totolink X2000R version 1.0.0-B20221212.1452 Description: A critical issue is related to the function formMapDelDevice in the /boafrm/formMapDelDevice file, where the manipulation of the macstr argument leads to command injection. This can be...

CVE-2024-0558

A vulnerability has been found in DedeBIZ 6.3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/makehtmlfreelistaction.php. The manipulation of the argument startid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

Sql injection

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System up to 1.0. This affects an unknown part of the file propertydetail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2024-0534

A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch...

CVE-2024-0533 Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow

A vulnerability was found in Tenda A15 15.13.07.13. It has been rated as critical. This issue affects some unknown processing of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument devName leads to stack-based buffer overflow. The...

CVE-2024-0528 CXBSoft Post-Office HTTP POST Request update_go.php sql injection

A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/updatego.php of the component HTTP POST Request Handler. The manipulation of the argument version leads to sql injection. The exploit has been disclose...

PT-2024-1451 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 Description: A critical issue has been identified in the function formAddSysLogRule of the httpd component, which can lead to a stack-based buffer overflow when the sysRulenEn argument is manipulated. This can be...

CVE-2024-0503 code-projects Online FIR System registercomplaint.php cross site scripting

A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to cross site scripting. It is possible to initiate the attack remotely. The...

Sql injection

A vulnerability classified as critical has been found in Taokeyun up to 1.0.5. This affects the function index of the file application/index/controller/app/Video.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. It is possible to initiate...

Sql injection

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /adminroute/incservicecredits.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

Sql injection

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

PT-2024-15578 · Code Projects · Code-Projects Online Faculty Clearance

Name of the Vulnerable Software and Affected Versions: code-projects Online Faculty Clearance version 1.0 Description: A critical issue has been found in the HTTP POST Request Handler component of the file deactivate.php. The manipulation of the haydi argument leads to SQL injection. This issue c...

PT-2024-15592 · Code Projects · Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A critical issue has been found in the Dormitory Management System, affecting some unknown functionality of the file modifyuser.php. The manipulation of the user id argument...

PT-2024-1991 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds access in the of pwm single xlate function of the Linux kernel's PWM Pulse Width Modulation driver. This can potentially allow an attacker to...

The vulnerability of the Apache OpenOffice office software lies in the insufficient validation of input data when processing arguments, allowing an attacker to execute arbitrary code.

The vulnerability of the Apache OpenOffice office software package lies in insufficient validation of input data during argument processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2024-15480 · Soxft · Soxft Timemail

Name of the Vulnerable Software and Affected Versions: soxft TimeMail versions up to 1.1 Description: A critical issue has been found in soxft TimeMail, affecting some unknown functionality of the file check.php. The manipulation of the argument c leads to sql injection. The exploit has been...

CVE-2023-7215

A vulnerability, which was classified as problematic, has been found in Chanzhaoyu chatgpt-web 2.11.1. This issue affects some unknown processing. The manipulation of the argument Description with the input leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2023-7215

CVE-2023-7215 affects Chanzhaoyu chatgpt-web version 2.11.1. The vulnerability is a cross-site scripting flaw triggered by manipulating the Description argument with the input "". Exploitation is remote and the vulnerability has been publicly disclosed. Affected component is the input handling fo...

Cross site scripting

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as problematic. This affects an unknown part of the file addmaterialsubmit.php. The manipulation of the argument tin leads to cross site scripting. It is possible to initiate the attack remotely. The...