7 matches found
CVE-2025-40932
Apache::SessionX versions through 2.01 for Perl create insecure session id. Apache::SessionX generates session ids insecurely. The default session id generator in Apache::SessionX::Generate::MD5 returns a MD5 hash seeded with the built-in rand function, the epoch time, and the PID. The PID will...
PT-2025-43645
Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description A buffer overflow exists in the D-Link DIR600L Ax FW116WWb01. This issue is due to a vulnerability in the formWlSiteSurvey function when handling the curTime parameter. Recommendations At the...
DLINK-DIR600LAx-Vulnerability
DLINK-DIR600LAx-Vulnerability - 01: - 02: - 03: - 04: - 0...
CVE-2025-40915 Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens
Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens. That version of the module generates tokens as an MD5 of the process id, the current time, and a single call to the built-in rand function...
CVE-2022-37778
Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the currenttime parameter of the time function...
PT-2022-24067 · Phicomm · Phicomm Fir303B A2 +3
Name of the Vulnerable Software and Affected Versions: Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers version V3.0.1.17 Description: A remote command execution issue was discovered, which can be exploited via the current time parameter of the time function. Recommendations: For...
