Lucene search
K

68 matches found

CVE
CVE
added 2026/05/05 6:30 p.m.2 views

CVE-2026-7855

CVE-2026-7855 affects D-Link DI-8100 firmware 16.07.26A1. The vulnerability is in the HTTP Request Handler, specifically the function tggl_asp in the file tggl.asp ; manipulating the Name argument triggers a buffer overflow. The issue is exploitable remotely and the exploit is public. CVSS-based ...

9CVSS7.8AI score0.00016EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/05 5:30 p.m.2 views

CVE-2026-7851

A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...

8.6CVSS7.7AI score0.00109EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/05 5:30 p.m.3 views

CVE-2026-7851 D-Link DI-8100 yyxz.asp sprintf stack-based overflow

A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...

8.6CVSS7.7AI score0.00109EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-5664

Malware in sbrugna...

5CVSS6.2AI score0.00102EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-11545

Malware in sbrugna...

6.2CVSS6.4AI score0.00071EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-30890

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.02866EPSS
Exploits0References1
NVD
NVD
added 2025/09/04 10:42 a.m.2 views

CVE-2025-9938

A weakness has been identified in D-Link DI-8400 16.07.26A1. The affected element is the function yyxzdlinkasp of the file /yyxz.asp. This manipulation of the argument ID causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...

9CVSS0.00422EPSS
Exploits1References6
CNVD
CNVD
added 2025/07/21 12:0 a.m.2 views

D-Link DI-8100 /jingx.asp File Buffer Overflow Vulnerability

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium-sized network environments, supporting up to 4 Internet ports and 4 LAN ports for up to 80 simultaneous users. The D-Link DI-8100 suffers from a buffer overflow vulnerability that originates from the failure of the...

8.6CVSS8.2AI score0.01509EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:52 p.m.3 views

CVE-2021-44031

An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allow pre-authentication remote code execution. An attacker could upload a .ASP file to reside at /images/GUID/filename...

9.8CVSS7.7AI score0.02866EPSS
Exploits0
CNNVD
CNNVD
added 2025/05/18 12:0 a.m.2 views

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China's D-Link. The D-Link DI-8100 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of input data for the parameters...

8.6CVSS8.1AI score0.01224EPSS
Exploits1References7
NVD
NVD
added 2024/08/05 5:15 a.m.16 views

CVE-2024-6117

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file...

9.3CVSS0.00672EPSS
Exploits0References1
OSV
OSV
added 2024/08/05 5:15 a.m.0 views

CVE-2024-6117

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file...

8.8CVSS5.9AI score
Exploits0References1
Cvelist
Cvelist
added 2024/08/05 4:20 a.m.18 views

CVE-2024-6117 Hamastar MeetingHub Paperless Meetings - Unrestricted Upload of File with Dangerous Type

A Unrestricted upload of file with dangerous type vulnerability in meeting management function in Hamastar MeetingHub Paperless Meetings 2021 allows remote authenticated users to perform arbitrary system commands via a crafted ASP file...

9.3CVSS0.00672EPSS
Exploits0References1
CVE
CVE
added 2024/08/05 4:20 a.m.24 views

CVE-2024-6117

CVE-2024-6117 affects Hamastar MeetingHub Paperless Meetings (version 2021). Multiple connected sources describe an unrestricted upload of files with dangerous types in the meeting management function, enabling remote authenticated users to execute arbitrary system commands via a crafted ASP file...

9.3CVSS6.6AI score0.00672EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/12/15 9:15 a.m.9 views

Design/Logic Flaw

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion LFI vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify...

6.4CVSS7.7AI score0.00342EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/02/24 4:15 p.m.15 views

CVE-2021-33224

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file...

9.8CVSS9.7AI score0.04476EPSS
Exploits0References2
Prion
Prion
added 2023/02/24 4:15 p.m.19 views

Unrestricted file upload

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file...

7.5CVSS9.6AI score0.04476EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/02/24 12:0 a.m.18 views

CVE-2021-33224

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file...

9.8AI score0.04476EPSS
Exploits0References2
Prion
Prion
added 2022/10/31 7:15 a.m.11 views

Design/Logic Flaw

Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service...

6.4CVSS6.8AI score0.00613EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/31 6:40 a.m.10 views

CVE-2022-40742 SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion

Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service...

6.5CVSS6.9AI score0.00613EPSS
Exploits0References1
Rows per page
Query Builder