CVE-2021-42232: Improper Neutralization of Special Elements used in an OS Command

TP-Link Archer A7 Archer A7USV5210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router...

CVE-2022-35105

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via /bin/png2swf+0x552cea...

PT-2022-23447 · D Link · D-Link Go-Rt-Ac750

Name of the Vulnerable Software and Affected Versions: D-Link GO-RT-AC750 versions GORTAC750 revA v101b03 through GO-RT-AC750 revB FWv200b02 Description: The issue concerns an authentication bypass. It is related to the function phpcgi main in cgibin. Recommendations: For D-Link GO-RT-AC750 versi...

mariadb: assertion failures in decimal_bin_size

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimalbinsize, which is exploited via specially crafted SQL statements, impacting availability...

mariadb: assertion failures in decimal_bin_size

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimalbinsize, which is exploited via specially crafted SQL statements, impacting availability...

Cross site request forgery (csrf)

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2022-34576: Undefined Security Weakness

A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2022-34501

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34501

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34520

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function rbinfilextrloadbuffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service DOS via a crafted binary file...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34501

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34501

CVE-2022-34501 concerns the bin-collection package for Python (PyPI) prior to v0.1, where a third-party backdoor enables code execution. The vulnerability affects the library’s handling of external packages mirrored from various sources, allowing an attacker to inject and execute malicious code. ...

CVE-2022-34501

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

bin_collection 安全漏洞

bincollection is used to check an iCal file for a specified date. A security vulnerability exists in bincollection that originates from a code execution backdoor inserted by a third party...

PT-2022-22183

Name of the Vulnerable Software and Affected Versions bin-collection package in PyPI before v0.1 Description The issue concerns a code execution backdoor that was inserted by a third party into the bin-collection package available on PyPI. This backdoor allows for the execution of arbitrary code,...