bin_collection 安全漏洞

bincollection is used to check if an iCal file has a specified date. A security vulnerability exists in bincollection that stems from the presence of a code execution backdoor that allows third-party injection...

PT-2022-22182

Name of the Vulnerable Software and Affected Versions bin-collect versions prior to 0.1 Description The issue concerns a code execution backdoor that was inserted by a third party into the bin-collect package available in PyPI. This backdoor allows for the execution of arbitrary code, posing a...

CVE-2022-34500: Undefined Security Weakness

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34501: Undefined Security Weakness

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

PT-2022-22188

Name of the Vulnerable Software and Affected Versions Radare2 version 5.7.2 Description The issue is related to a NULL pointer dereference via the function r bin file xtr load buffer at bin/bfile.c. This allows attackers to cause a Denial of Service DOS via a crafted binary file. Recommendations...

radare2 代码问题漏洞

radare2 is a set of libraries and tools for working with binary files. radare2 v5.7.2 contains a security vulnerability that stems from a NULL pointer dereference vulnerability discovered via the rbinfilextrloadbuffer function in bin/bfile.c. No detailed vulnerability details are available at thi...

CVE-2022-2487

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

Command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

Command injection

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

CVE-2022-2486 WAVLINK WN535K2/WN535K3 os command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

PT-2022-16933

Name of the Vulnerable Software and Affected Versions WAVLINK WN535K2 WAVLINK WN535K3 Description A critical issue was found in the file /cgi-bin/mesh.cgi?page=upgrade, where the manipulation of the key argument leads to os command injection. The exploit has been disclosed to the public and may b...

CVE-2022-2487: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

CVE-2022-2486: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

CVE-2022-2488: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

PT-2022-16941

Name of the Vulnerable Software and Affected Versions WAVLINK WN535K2 WAVLINK WN535K3 Description A critical issue has been identified, affecting the /cgi-bin/nightled.cgi file. The manipulation of the start hour argument leads to os command injection. The exploit has been disclosed to the public...

CVE-2022-32434: Out-of-bounds Write

EIPStackGroup OpENer v2.3.0 was discovered to contain a stack overflow via /bin/posix/src/ports/POSIX/OpENer+0x56073d...

PT-2022-21320

Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer version 2.3.0 Description A stack overflow issue was discovered in EIPStackGroup OpENer. The issue occurs via /bin/posix/src/ports/POSIX/OpENer+0x56073d. Recommendations For EIPStackGroup OpENer version 2.3.0, at the momen...

CVE-2022-31012

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into C:\mingw64\bin\git.exe by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

CVE-2022-31012

Git for Windows is a fork of Git that contains Windows-specific patches. This vulnerability in versions prior to 2.37.1 lets Git for Windows' installer execute a binary into "C:\mingw64\bin\git.exe" by mistake. This only happens upon a fresh install, not when upgrading Git for Windows. A patch is...

CVE-2022-32988: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...