WordPress plugin WordPress File Upload 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

CVE-2024-11635: Improper Control of Generation of Code

The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the 'wfuABSPATH' cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server...

PT-2025-1673

Name of the Vulnerable Software and Affected Versions WordPress File Upload plugin versions up to and including 4.24.12 Description The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the wfu ABSPATH cookie...

NewStart CGSL MAIN 6.02 : python-requests Vulnerability (NS-SA-2024-0058)

The remote NewStart CGSL host, running version MAIN 6.02, has python-requests packages installed that are affected by a vulnerability: - A flaw was found in the way python-requests set the domain cookie parameter for certain HTTP responses. A remote attacker could use this flaw to modify a cookie...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42658: Exposure of Sensitive Information to an Unauthorized Actor

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42658

CVE-2024-42658 affects wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0. The Red Hat/NVD entries and vendor references describe an information disclosure where a remote attacker can obtain sensitive data via the cookie parameter. The exact root cause details are not provided beyond the cookie pa...

PT-2024-30095 · Wishnet · Wishnet Nepstech Wifi Router Ntpl-Xpon1Gfevn

Name of the Vulnerable Software and Affected Versions: wishnet Nepstech Wifi Router NTPL-XPON1GFEVN version 1.0 Description: An issue in the wishnet Nepstech Wifi Router allows a remote attacker to obtain sensitive information via the cookie's parameter. Recommendations: For wishnet Nepstech Wifi...

The vulnerability of the sub_41D354() function in D-Link DIR-823G router’s software allows a hacker to execute arbitrary code or cause malfunctions during maintenance.

The vulnerability of the sub41D354 function in D-Link DIR-823G router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the Cookie parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

D-Link DIR-823G Cookie Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a home dual-band Gigabit wireless router with second-generation 802.11ac Wi-Fi5 technology designed for medium- to high-speed broadband networks. The D-Link DIR-823G suffers from a buffer overflow vulnerability, which stems from a buffer overflow vulnerability in a cookie...

CVE-2024-27656

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input, and possibly remote code execution...

CVE-2024-27656

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input, and possibly remote code execution...

Buffer overflow

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input, and possibly remote code execution...

CVE-2024-27656: Stack-based Buffer Overflow

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input, and possibly remote code execution...

D-Link DIR-823G Security Vulnerability

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-823G version A1V1.0.2B05, which originates from a buffer overflow vulnerability in the Cookie parameter...

PT-2024-1948 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the sub 41D354 function of the D-Link DIR-823G router's firmware when handling the Cookie parameter. This can allow a remote attacker to execute...

Cross Site Scripting(XSS)

sympa:sid is vulnerable to cross-site scripting. The vulnerability due to Inappropriate use of the cookie parameter is both a salt for stored passwords. It leads to XSS due to parameter may also not provide sufficient security...

DEBIAN-CVE-2021-46900

Sympa before 6.2.62 relies on a cookie parameter for certain security objectives, but does not ensure that this parameter exists and has an unpredictable value. Specifically, the cookie parameter is both a salt for stored passwords and an XSS protection mechanism...