The vulnerability of the setipsec_config() function (/goform/setipsec_config) in D-Link DIR-816 router software allows a hacker to execute arbitrary commands.

The vulnerability of the setipsecconfig function /goform/setipsecconfig of the D-Link DIR-816 router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command for processing parameters localIP and remoteIP...

The vulnerability of the formSetRebootTimer() function (/goform/SetRebootTimer) in the Tenda AC6 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the formSetRebootTimer function /goform/SetRebootTimer in the Tenda AC6 router’s microprogrammed software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the rebootTime parameter. Exploiting this vulnerability could allow a...

The vulnerability of the built-in web server boa (/boafrm/formWsc) of TOTOLINK EX1200T router microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in web server boa /boafrm/formWsc of TOTOLINK EX1200T routers is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending a specially...

IBM Verify Identity Access Digital Credentials 安全漏洞

IBM Verify Identity Access Digital Credentials is a rights management system from International Business Machines IBM. A security vulnerability exists in IBM Verify Identity Access Digital Credentials version 24.06 that originates from a specially crafted POST request and could cause the service ...

The vulnerability of the SCADA system Pult.online, related to inconsistencies in responses to incoming requests, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system Pult.online is related to inconsistencies in responses to incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information by sending a specially crafted POST request...

AudioCodes Audiocodes Mediapack MP-11x 安全漏洞

The AudioCodes Audiocodes Mediapack MP-11x is a gateway device from AudioCodes Israel. A security vulnerability exists in AudioCodes Audiocodes Mediapack MP-11x 6.60A.369.002 and earlier versions, which stems from a specially crafted POST request that could lead to unauthorized code execution...

CVE-2024-42980

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42979

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the frmL7ProtForm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42973

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSetlpBind function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42955

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the fromSafeClientFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42943

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the PPPOEPassword parameter in the fromAdvSetWan function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42969

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromSafeUrlFilter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42982

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the page parameter in the fromVirtualSer function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-31502

An issue in Insurance Management System v.1.0.0 and before allows a remote attacker to escalate privileges via a crafted POST request to /admin/core/newstaff...

CVE-2024-22632

Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request...

CVE-2024-42942

Tenda FH1201 v1.2.0.14 408 was discovered to contain a stack overflow via the page parameter in the frmL7ImForm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-42977

Tenda FH1206 v02.03.01.35 was discovered to contain a stack overflow via the qos parameter in the fromqossetting function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27572

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27569

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the initnvram function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-27570

LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the generateconfrouter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...