CVE-2024-52275 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromWizardHandle modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52274 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 setDoubleL2tpConfig-guestipcheckoverflow arg: mask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52274

The CVE-2024-52274 issue is a stack-based buffer overflow in Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check) affecting versions through 15.03.06.50. Root cause: improper handling of input in the guest_ip_check function within the setDoubleL2tpConfig module, enabling buffer overflows. Impact:...

CVE-2024-52273 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 setDoublePppoeConfig-guestipcheckoverflow arg: mask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52273 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 setDoublePppoeConfig-guestipcheckoverflow arg: mask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52273

CVE-2024-52273 is a stack-based buffer overflow affecting Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check module) up to version 15.03.06.50. The root cause is improper input validation in guest_ip_check within setDoublePppoeConfig, enabling potential buffer overflows. Public sources assign a...

CVE-2024-52272 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromAdvSetLanipoverflow arg:lanMask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52272

CVE-2024-52272 is a stack-based buffer overflow in the Tenda AC6V2 router, triggered by improper handling of the lanMask parameter in the fromAdvSetLanip module. Affected devices exist through version 15.03.06.50 . The vulnerability’s root cause is the unchecked processing of the lanMask argument...

CVE-2024-52272 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromAdvSetLanipoverflow arg:lanMask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

Logic Flaw Vulnerability in Education Cloud Platform of Beijing Zhongqing Modern Technology Co.

Beijing Zhongqing Modern Technology Co. A logic flaw vulnerability exists in the education cloud platform of Beijing Zhongqing Modern Technology Co. Ltd. that can be exploited by an attacker to reset arbitrary user passwords...

CVE-2024-53728

Cross-Site Request Forgery CSRF vulnerability in Oliver Lindner Protect Your Content protect-your-content allows Stored XSS.This issue affects Protect Your Content: from n/a through = 1.0.2...

CVE-2024-53728 WordPress Protect Your Content plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Oliver Lindner Protect Your Content protect-your-content allows Stored XSS.This issue affects Protect Your Content: from n/a through = 1.0.2...

CVE-2024-53728

CVE-2024-53728 describes a CSRF to Stored XSS vulnerability in WordPress Protect Your Content (SEO-Küche Internet Marketing GmbH & Co. KG) affecting versions up to 1.0.2. Public sources (NVD/RH/CVE/CVE List) confirm the issue as CSRF leading to Stored XSS with a base CVSS v3.1 score of 7.1 (HIGH)...

CVE-2024-50357

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial factory default configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server GUI or Web authentication ...

CVE-2024-50357

CVE-2024-50357 affects FutureNet NXR series routers from Century Systems. The issue arises because REST-APIs are unintentionally enabled on startup when http-server (GUI) or Web authentication is enabled, even though REST-APIs are disabled by default. The factory default enables http-server (GUI)...

CVE-2024-50357

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial factory default configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server GUI or Web authentication ...

CVE-2024-50357

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial factory default configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server GUI or Web authentication ...

Command Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a large erp enterprise management system and e-commerce platform. A command execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to execute arbitrary commands...

CVE-2024-10522

The Co-marquage service-public.fr plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 0.5.76. This makes it possible for unauthenticated attackers to inject arbitrary web...

CVE-2024-10522 Co-marquage service-public.fr <= 0.5.76 - Reflected Cross-Site Scripting via add_query_arg Parameter

The Co-marquage service-public.fr plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 0.5.76. This makes it possible for unauthenticated attackers to inject arbitrary web...