CVE-2022-40068

Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand...

CVE-2022-40069

Tenda AC21 is affected by CVE-2022-40069. The vulnerability is a buffer overflow in the fromSetSysTime() function exposed via /bin/httpd on version 16.03.08.15, caused by insufficient input length checking. This can cause the httpd process to restart and potentially process payloads, with CVSS v3...

CVE-2022-40069

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime...

CVE-2022-40073

Affected product: Tenda AC21 router, version 16.03.08.15. Vulnerable component/function: /bin/httpd, saveParentControlInfo. Root cause: missing length checking leading to a buffer overflow. Documented impact: potential httpd restart; CVSSv3 base score 7.5 (HIGH), network attack vector, no user in...

CVE-2022-40074

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi...

Tenda AC21 缓冲区错误漏洞

The Tenda AC21 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC21 version V16.03.08.15, which originates from a lack of length checking of input data in the setSmartPowerManagement function of /bin/httpd, which can be exploited to cause httpd...

Tenda AC21 缓冲区错误漏洞

Tenda AC21 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC21 version V16.03.08.15, which is prone to a buffer overflow attack via the setSchedWifi function in /bin/httpd...

Exploit for Path Traversal in Apache Http_Server

Apache 2.4.50 - Path Traversal or Remote Code Execution cve-20...

Exploit for Path Traversal in Apache Http_Server

Apache 2.4.50 - Path Traversal or Remote Code Execution cve-20...

Malicious Package

Overview has-bin-entries is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

mariadb: assertion failures in decimal_bin_size

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimalbinsize, which is exploited via specially crafted SQL statements, impacting availability...

Malicious code in pkg_with_bin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e6344dd060632869845f44769fb6ef861c6d3c687ea297cff8c6a21c642acd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3565 Malicious code in has-bin-entries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in has-bin-entries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-40112

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa...

CVE-2022-40110

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa...

CVE-2022-40110

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa...

Buffer overflow

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa...

Code injection

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

CVE-2022-40110

CVE-2022-40110 affects TOTOLINK A3002R (TOTOLINK-A3002R-He-V1.1.1-B20200824.0128). The vulnerability is a buffer overflow via /bin/boa, with NVD indicating a CVSS v3.1 base score of 7.5 (High) and network attack vector with no privileges required. Multiple connected sources corroborate the existe...