Buffer overflow vulnerability in AC9V3.0 upgrade software of Shenzhen Jixiang Tengda Technology Co.(CNVD-2020-29378)

AC9V3.0 upgrade software is a wireless router with gigabit network port from Shenzhen Jixiang Tengda Technology Co. Ltd. AC9V3.0 upgrade software has a buffer overflow vulnerability, which can be exploited by an attacker to cause a denial of service overwrite the return value of a function, and t...

Buffer overflow vulnerability in AC9V3.0 upgrade software of Shenzhen Jixiang Tengda Technology Co.(CNVD-2020-29381)

AC9V3.0 upgrade software is a Gigabit Ethernet port wireless router from Shenzhen Jixiang Tengda Technology Co. Ltd. AC9V3.0 upgrade software has a buffer overflow vulnerability, which can be exploited by an attacker to cause a denial of service overwrite the return value of a function, and the...

AMD ATI atillk64.sys Elevation of Privilege Vulnerability

AMD ATI atillk64.sys is an American AMD driver that enables Windows to control computer hardware. A security vulnerability exists in AMD ATI atillk64.sys version 5.11.9.0. The vulnerability can be exploited by an attacker to gain NT AUTHORITYSYSTEM privileges with the help of DeviceIoControl call...

PT-2020-13060

Name of the Vulnerable Software and Affected Versions atillk64.sys version 5.11.9.0 Description The issue allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process...

Unspecified Vulnerability in Evenroute IQrouter

Evenroute IQrouter is a smart router from Evenroute USA. A security vulnerability exists in Evenroute IQrouter 3.3.1 and earlier versions that stems from incorrect access control. An attacker can exploit the vulnerability to take control of the device reboot the network, upgrade, reset, etc...

CVE-2020-11967

In IQrouter through 3.3.1, remote attackers can control the device restart network, reboot, upgrade, reset because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration which has a...

CVE-2020-11967

In IQrouter through 3.3.1, remote attackers can control the device restart network, reboot, upgrade, reset because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration which has a...

D-Link DSL-2640B B2 Trust Management Issue Vulnerability

The D-Link DSL-2640B B2 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DSL-2640B B2 EU4.01B version, which comes with hard-coded accounts in the router. The vulnerability can be exploited by an attacker to log in to the management interface,...

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

Vastgota-Data ProVide Input Validation Error Vulnerability

Vastgota-Data ProVide is a file transfer server with a graphical user interface from Vastgota-Data, Sweden. A security vulnerability exists in Vastgota-Data ProVide version 13.1 and earlier. An attacker can exploit the vulnerability to bypass sandbox restrictions and take full control of the devi...

CRLF Injection

Xterm is vulnerable to CRLF Injection. A flaw was found in the xterm handling of Device Control Request Status String DECRQSS escape sequences. An attacker could create a malicious text file or log entry, if unfiltered that could run arbitrary commands if read by a victim inside an xterm window...

CVE-2020-10263

CVE-2020-10263 affects Xiaomi Xiao AI Speaker Pro LX06 with firmware 1.52.4. Multiple sources describe a local UART-accessible remote-root capability, enabling an attacker to: read Wi‑Fi SSID/password, access user dialogues, abuse TTS voice to spoof, eavesdrop, modify system files, issue IR codes...

CVE-2020-7628

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

Command injection

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

CVE-2020-7628

umount through 1.1.6 is vulnerable to Command Injection. The argument device can be controlled by users without any sanitization...

Comtrend VR-3033 Command Injection Vulnerability

The Comtrend VR-3033 is a high power 802.11n 300Mbps single line VDSL router. The Comtrend VR-3033 DE11-416SSG-C01R02.A2pvI042j1.d26m suffers from a command injection vulnerability. A remote authenticated attacker could exploit this vulnerability via the ping and traceroute diagnostic pages to ta...

CVE-2020-9477

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

CVE-2020-9477

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

Buffer Overflow Vulnerability in Tenda Routers

Tenda AC6 is a 1200M 11ac dual-band wireless router built for home users who are upgrading their broadband and updating their routing.Tenda AC15 is a 1900M wireless router.Tenda AC18 is a wireless router product. Tenda routers have a buffer overflow vulnerability that can be exploited by an...