CVE-2023-27805

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27810

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27804

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27802

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27805

CVE-2023-27805 concerns the H3C Magic R100 router (firmware for R100V100R005.bin). The vulnerability is a stack overflow in the EditSTList interface at /goform/aspForm, allowing a crafted payload to trigger a Denial of Service. The publicly documented impact is availability loss (DoS); no explici...

Schneider Electric v1.0 - Directory traversal & Broken Authentication

Exploit Title: Schneider Electric v1.0 - Directory traversal & Broken Authentication Google Dork: inurl:/scada-vis Date: 3/11/2023 Exploit Author: parsa rezaie khiabanloo Vendor Homepage: https://www.se.com/ Version: all-versions Tested on: Windows/Linux/Android Attacker can using these dorks and...

CVE-2023-27807

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27806

CVE-2023-27806 affects H3C Magic R100/R100V100R005.bin via the ipqos_lanip_dellist interface at /goform/aspForm, causing a stack overflow that can lead to Denial of Service. The provided documents consistently describe a DoS outcome from a crafted payload but do not include concrete exploitation ...

CVE-2023-27801

CVE-2023-27801 affects H3C Magic R100 family (R100V100R005.bin). The vulnerability is a stack overflow in the DelDNSHnList interface exposed via /goform/aspForm, leading to Denial of Service. The provided sources consistently describe the same root cause and impact (availability loss) without det...

CVE-2023-27808

CVE-2023-27808 describes a stack overflow in H3C Magic R100 router component at the DeltriggerList interface (/goform/aspForm) of the R100V100R005.bin, enabling a crafted payload to trigger a Denial of Service. Affected product: H3C Magic R100 (R100V100R005.bin). Underlying cause: stack overflow ...

CVE-2023-27803

CVE-2023-27803 affects H3C Magic R100 firmware (R100V100R005.bin). A stack overflow via the EdittriggerList interface at /goform/aspForm allows a crafted payload to cause a Denial of Service. Public documents reference this description, and one PT-Security entry recommends disabling the API endpo...

CVE-2023-27804

CVE-2023-27804 affects H3C Magic R100 (R100V100R005.bin) with a stack overflow via the DelvsList interface at “/goform/aspForm”, leading to a potential Denial of Service . Exploitation requires a crafted payload; impact is limited to availability (no confidentiality/integrity impact stated). The ...

CVE-2023-27802

CVE-2023-27802 affects the H3C Magic R100 router (R100V100R005.bin). A stack overflow via the EditvsList parameter at /goform/aspForm is reported, enabling a Denial of Service through a crafted payload. The connected sources consistently identify the affected product and endpoint; no public fix/v...

Linux/x86 - Polymorphic linux x86 Shellcode (92 Bytes)

Exploit Title: Polymorphic linux x86 nc -lvve/bin/sh -p13377 shellcode 92 Bytes Exploit Author: Eduardo Silva Tested on: Linux x8664 SMP Debian 4.19.260-1 SLAE/Student ID: PA-31319 Webpage: https://0xnibbles.github.io/ Description: This shellcode is a polymorphic version of...

TOTOLINK A7100RU 命令注入漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A7100RU suffers from a command injection vulnerability that stems from the enabled parameter of cgi-bin/cstecgi.cgi failing to properly filter constructed command special characters, commands, etc., whi...

Amazon Linux 2023 : golang, golang-bin, golang-misc (ALAS2023-2023-048)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-048 advisory. A vulnerability was found in archive/zip of the Go standard library. Applications written in Go can panic or potentially exhaust system memory when parsing malformed ZIP files. CVE-2021-33196 A...

Debian: Security Advisory (DLA-217-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wirelessmft ap field...

How to Tackle the Top SaaS Challenges of 2023

Are you prepared to tackle the top SaaS challenges of 2023? With high-profile data breaches affecting major companies like Nissan and Slack, it's clear that SaaS apps are a prime target for cyberattacks. The vast amounts of valuable information stored in these apps make them a goldmine for hacker...

The vulnerability of the DIR-605L router’s microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the DIR-605L router’s microprogramming software is related to buffer overflows during the processing of BOA binary files in the bin directory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...