314 matches found
CVE-2023-34843
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
Directory traversal
Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request...
CVE-2023-30261
Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request...
CVE-2023-30261
Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request...
CVE-2023-36356
TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read out-of-bounds via the component /userRpm/VirtualServerRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...
CVE-2023-36358
TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlAccessTargetsRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...
Buffer overflow
TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to contain a buffer overflow in the component /userRpm/AccessCtrlTimeSchedRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...
CVE-2023-29711
An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request...
Design/Logic Flaw
An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request...
Interlink PSG-5124 安全漏洞
The Interlink PSG-5124 is a switch from Interlink. A security vulnerability exists in the Interlink PSG-5124 version 1.0.4 that stems from the presence of an incorrect access control issue that allows an attacker to execute arbitrary code via a crafted GET request...
TP-LINK TL-WR940N 安全漏洞
The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. The TP-LINK TL-WR940N suffers from a security vulnerability that originates from a security issue in the component LocalManageControlRpm. An attacker could exploit the vulnerability to cause a denial of service DoS by constructing...
PT-2023-3453 · Tp Link · Tp-Link Tl-Wr941Nd +2
Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N versions V2 through V4 TP-Link TL-WR841N versions V8 through V10 TP-Link TL-WR941ND versions V5 through V6 Description: A buffer overflow was discovered in the /userRpm/QoSRuleListRpm component of TP-Link routers, allowing...
The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software lies in improper cleaning or release of resources, allowing a intruder to trigger a service failure.
The vulnerability of TP-Link Archer C7 Wi-Fi routers’ microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted GET request...
CVE-2020-23966
SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...
CVE-2023-25289
Directory Traversal vulnerability in virtualreception Digital Receptie version win7sp1rtm.101119-1850 6.1.7601.1.0.65792 in embedded web server, allows attacker to gain sensitive information via a crafted GET request...
CVE-2023-27159
Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request...
CVE-2023-27055
Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...
Design/Logic Flaw
Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...
CVE-2023-27055
Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request...
AVer Information PTZApp 路径遍历漏洞
AVer Information PTZApp is an innovative freeware with an upgrade interface from AVer Information China. It is used to control AVer USB cameras. A security vulnerability exists in AVer Information PTZApp version v20.01044.48. An attacker has exploited the vulnerability to access sensitive files v...