CVE-2022-31845: Exposure of Resource to Wrong Sphere

A vulnerability in livecheck.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...

CVE-2022-31309: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in livecheck.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution of the exec cmd function...

PT-2022-20954

Name of the Vulnerable Software and Affected Versions WAVLINK WN535 G3 version M35G3R.V5030.180927 Description A vulnerability in the live mfg.shtml file allows attackers to obtain sensitive router information via execution of the exec cmd function. Recommendations For WAVLINK WN535 G3 version...

CVE-2022-31846: Exposure of Resource to Wrong Sphere

A vulnerability in livemfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...

CVE-2022-31308: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in livemfg.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.191012 allows attackers to obtain sensitive router information via execution of the exec cmd function...

PT-2022-20953

Name of the Vulnerable Software and Affected Versions WAVLINK WN535 G3 version M35G3R.V5030.180927 Description A vulnerability in the live check.shtml file allows attackers to obtain sensitive router information via execution of the exec cmd function. Recommendations For version...

PT-2022-17531

Name of the Vulnerable Software and Affected Versions IGEL Universal Management Suite UMS version 6.07.100 Description An issue was discovered in the transmission of cleartext LDAP bind credentials by the cmd mgt load mgt tree command, allowing an attacker who can intercept or inspect traffic...

CVE-2022-30909

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm...

CVE-2022-30909

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm...

Stack overflow

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm...

CVE-2022-30909

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm...

PT-2022-20370

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005 Description A stack overflow issue was discovered via the CMD parameter at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R100 version R100V100R005, consider disabling access to the...

CVE-2022-30909: Out-of-bounds Write

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the CMD parameter at /goform/aspForm...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-1805)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-8569

Name of the Vulnerable Software and Affected Versions GRUB2 affected versions not specified Description The issue is related to a use-after-free vulnerability in the grub cmd chainloader function. This function is used to boot operating systems that do not support multiboot and do not have direct...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2022-1805)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption...

YourCyanide: A CMD-Based Ransomware With Multiple Layers of Obfuscation

The Trend Micro Threat Hunting team recently analyzed a series of CMD-based ransomware variants with a number capabilities such as stealing user information, bypassing remote desktop connections, and propagating through email and physical drives...

YourCyanide: A CMD-based Ransomware With Multiple Layers of Obfuscation

The Trend Micro Threat Hunting team recently analyzed a series of CMD-based ransomware variants with a number capabilities such as stealing user information, bypassing remote desktop connections, and propagating through email and physical drives...

PT-2025-8225

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0-rc3-next-20220422-00003-g2176915513ca Description A vulnerability in the Linux kernel has been identified, which can cause an io hung when disconnecting a device. This issue is triggered by "qemu-nbd" and...

CVE-2022-29337

C-DATA FD702XW-X-R430 v2.1.13X001 was discovered to contain a command injection vulnerability via the vacmd parameter in formlanipv6. This vulnerability allows attackers to execute arbitrary commands via a crafted HTTP request...