Security update for tomcat10

This update for tomcat10 fixes the following issues: Fixed refactor CGI servlet to access resources via WebResources bsc1243815. Fixed limits the total number of parts in a multi-part request and limits the size of the headers provided with each part bsc1244656. Fixed expand checks for webAppMoun...

Exploit for OS Command Injection in Php

CVE-2024-4577 - PHP CGI Argument Injection RCE Summary CV...

Security update for tomcat

This update for tomcat fixes the following issues: CVE-2025-46701: Refactored CGI servlet to access resources via WebResources bsc1243815. CVE-2025-48988: Limited the total number of parts in a multi-part request and limits the size of the headers provided with each part bsc1244656. CVE-2025-4912...

CVE-2025-45029

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2025-45029: Heap-based Buffer Overflow

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

PT-2025-28663 · D Link · D-Link Dir-645

Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 versions 1.05B01 and earlier Description: A critical issue affects the ssdpcgi main function of the ssdpcgi component, located in the /htdocs/cgibin file. This problem leads to command injection and can be exploited remotely. T...

CVE-2025-41418

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request...

VulnCheck KEV: CVE-2024-54764

An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...

CVE-2025-41418

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request...

CVE-2025-41418

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request...

CVE-2025-41418

CVE-2025-41418 is a buffer overflow in TB-eye network recorders and TB-eye AHD recorders. The CGI process may terminate abnormally when handling a specially crafted request, affecting availability (low impact). No explicit exploit details are provided in the supplied documents. Remediation exists...

CVE-2025-41418

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request...

PT-2025-27050 · Unknown · Tb-Eye Network Recorders +1

Name of the Vulnerable Software and Affected Versions: TB-eye network recorders and AHD recorders affected versions not specified Description: A buffer overflow issue exists in the affected devices. The CGI process may terminate abnormally when processing a specially crafted request...

ruby security update

3.3.8-10 - Upgrade to Ruby 3.3.8. Resolves: RHEL-87342 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. CVE-2025-25186 - Fix Denial of Service in CGI::Cookie.parse. CVE-2025-27219 Resolves: RHEL-86116 - Fix userinfo leakage in URIjoin, URImerge and URI+. CVE-2025-27221...

CVE-2025-41418: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request...

CVE-2025-34048

A path traversal vulnerability exists in the web management interface of D-Link DSL-2730U, DSL-2750U, and DSL-2750E ADSL routers with firmware versions IN1.02, SEA1.04, and SEA1.07. The vulnerability is due to insufficient input validation on the getpage parameter within the /cgi-bin/webproc CGI...

CVE-2025-34037

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcpip parameter without sanitization, allowing...

Beward N100 IP Camera security vulnerability

Beward N100 IP Camera is an open source camera from Beward, Russia. A security vulnerability exists in Beward N100 IP Camera version M2.1.6.04C014, which is caused by incorrect manipulation of the ServerName and TimeZone parameters in the servetest CGI page, resulting in a command injection attac...

CVE-2025-34042: Improper Neutralization of Special Elements used in an OS Command

An authenticated command injection vulnerability exists in the Beward N100 IP Camera firmware version M2.1.6.04C014 via the ServerName and TimeZone parameters in the servetest CGI page. An attacker with access to the web interface can inject arbitrary system commands into these parameters, which...

CVE-2025-30131: Unrestricted Upload of File with Dangerous Type

An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam...