4002 matches found
CVE-2022-41483
Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01 was discovered to contain a buffer overflow in the 0x4a12cc function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
Tenda AC1200 安全漏洞
The Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01, which originates from a buffer overflow in the 0x47c5dc function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted...
CVE-2022-35135
Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/...
Boodskap IoT Platform 授权问题漏洞
Boodskap IoT Platform is an IoT platform from Boodskap. A security vulnerability exists in Boodskap IoT Platform version v4.4.9-02, which can be exploited by an attacker to elevate privileges via a crafted request sent to the...
Tenda AC1200 安全漏洞
Tenda AC1200 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC1200 USAC6V2.0RTLV15.03.06.51multiTDE01, which originates from a buffer overflow in the 0x47ce00 function, which can be exploited by an attacker to trigger a denial of service DoS via a crafted...
Tenda AC1900 安全漏洞
Tenda AC1900 is a series of routers from Tenda China. A security vulnerability exists in the Tenda AC1900 AP500USV1180320Beta, which originates from a buffer overflow in the 0x32384 function, and can be exploited by an attacker to cause a denial of service DoS via a crafted request...
CVE-2022-41484
Tenda AC1900 AP500USV1180320Beta was discovered to contain a buffer overflow in the 0x32384 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
AliExpress Dropshipping and Fulfilment for WooCommerce < 1.1.1 - Unauthenticated Sensitive Data Exposure
The plugin disclose sensitive information to unauthenticated users via a crafted request...
ruby: Cookie prefix spoofing in CGI::Cookie.parse
A flaw was found in Ruby. RubyGems cgi gem could allow a remote attacker to conduct spoofing attacks caused by the mishandling of security prefixes in cookie names in the CGI::Cookie.parse function. By sending a specially-crafted request, an attacker could perform cookie prefix spoofing attacks...
PT-2022-5374 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Microsoft Security Support Provider Interface SSPI in the Windows operating system, which is associated with access control weaknesses...
PT-2022-22086 · Nocodb · Nocodb
Name of the Vulnerable Software and Affected Versions: NocoDB versions prior to 0.92.0 Description: The issue allows actors to cause a Denial of Service DoS by inserting large characters into the input field New Project on the create field via a crafted HTTP request. Recommendations: For versions...
The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software platform allows a hacker to execute arbitrary code.
The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software framework is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
Google Pixel 安全漏洞
Google Android is a Linux-based open-source operating system from the US company Google. Google Android suffers from a denial-of-service vulnerability, which is caused by a flaw in messaging. By sending a specially crafted request, an attacker can exploit this vulnerability to cause a denial of...
The vulnerability of the Apache Struts software platform, related to improper code generation management, allows attackers to execute arbitrary code.
The vulnerability of the Apache Struts software framework is related to improper code generation during the processing of the includeParams attribute. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
httpd: mod_proxy_uwsgi: out-of-bounds read via a crafted request uri-path
An out-of-bounds read in modproxyuwsgi of httpd allows a remote unauthenticated attacker to crash the service through a crafted request. The highest threat from this vulnerability is to system availability...
CVE-2022-1718
The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...
Path traversal
An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...
The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software platform allows a hacker to execute arbitrary code.
The vulnerability of the OGNL expression transformation class implementation in the Apache Struts software framework is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted request...
Joomla! Cross-Site Scripting (CVE-2021-23124)
A stored cross-site scripting vulnerability exists in Joomla! CMS Core. The vulnerability is due to improper validation of the title parameter in the modbreadcrumbs module. A remote, authenticated attacker can exploit the vulnerability by sending a crafted request to the server...
