CVE-2024-52275

The CVE-2024-52275 entry concerns the Tenda AC6V2 router, specifically a stack-based buffer overflow in the WizardHandle modules. Affected versions are up to 15.03.06.50. The underlying cause is unsafe handling/overflow of input data within the WizardHandle components, enabling a buffer overflow ...

CVE-2024-52275 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromWizardHandle modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52274

The CVE-2024-52274 issue is a stack-based buffer overflow in Tenda AC6V2 (setDoubleL2tpConfig->guest_ip_check) affecting versions through 15.03.06.50. Root cause: improper handling of input in the guest_ip_check function within the setDoubleL2tpConfig module, enabling buffer overflows. Impact:...

CVE-2024-52274 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 setDoubleL2tpConfig-guestipcheckoverflow arg: mask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52273 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 setDoublePppoeConfig-guestipcheckoverflow arg: mask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52273

CVE-2024-52273 is a stack-based buffer overflow affecting Tenda AC6V2 (setDoublePppoeConfig->guest_ip_check module) up to version 15.03.06.50. The root cause is improper input validation in guest_ip_check within setDoublePppoeConfig, enabling potential buffer overflows. Public sources assign a...

CVE-2024-52273 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 setDoublePppoeConfig-guestipcheckoverflow arg: mask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52272 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromAdvSetLanipoverflow arg:lanMask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-52272

CVE-2024-52272 is a stack-based buffer overflow in the Tenda AC6V2 router, triggered by improper handling of the lanMask parameter in the fromAdvSetLanip module. Affected devices exist through version 15.03.06.50 . The vulnerability’s root cause is the unchecked processing of the lanMask argument...

CVE-2024-52272 Denial of Service on Tenda AC6V2 Due To Stack Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromAdvSetLanipoverflow arg:lanMask modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

Logic Flaw Vulnerability in Education Cloud Platform of Beijing Zhongqing Modern Technology Co.

Beijing Zhongqing Modern Technology Co. A logic flaw vulnerability exists in the education cloud platform of Beijing Zhongqing Modern Technology Co. Ltd. that can be exploited by an attacker to reset arbitrary user passwords...

CVE-2024-52275: Stack-based Buffer Overflow

Stack-based Buffer Overflow vulnerability in Shenzhen Tenda Technology Co Tenda AC6V2 fromWizardHandle modules allows Overflow Buffers.This issue affects Tenda AC6V2: through 15.03.06.50...

CVE-2024-53728

Cross-Site Request Forgery CSRF vulnerability in Oliver Lindner Protect Your Content protect-your-content allows Stored XSS.This issue affects Protect Your Content: from n/a through = 1.0.2...

CVE-2024-53728 WordPress Protect Your Content plugin <= 1.0.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Oliver Lindner Protect Your Content protect-your-content allows Stored XSS.This issue affects Protect Your Content: from n/a through = 1.0.2...

CVE-2024-53728

CVE-2024-53728 describes a CSRF to Stored XSS vulnerability in WordPress Protect Your Content (SEO-Küche Internet Marketing GmbH & Co. KG) affecting versions up to 1.0.2. Public sources (NVD/RH/CVE/CVE List) confirm the issue as CSRF leading to Stored XSS with a base CVSS v3.1 score of 7.1 (HIGH)...

CVE-2024-50357

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial factory default configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server GUI or Web authentication ...

CVE-2024-50357

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial factory default configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server GUI or Web authentication ...

CVE-2024-50357

CVE-2024-50357 affects FutureNet NXR series routers from Century Systems. The issue arises because REST-APIs are unintentionally enabled on startup when http-server (GUI) or Web authentication is enabled, even though REST-APIs are disabled by default. The factory default enables http-server (GUI)...

CVE-2024-50357

FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial factory default configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server GUI or Web authentication ...

Command Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a large erp enterprise management system and e-commerce platform. A command execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to execute arbitrary commands...