CVE-2023-37214

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

CVE-2023-37214

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

CVE-2023-37214 Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

CVE-2023-37214 Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection

Heights Telecom ERO1xS-Pro Dual-Band FW version BZERO1XP.025...

CVE-2023-37214

CVE-2023-37214 concerns Heights Telecom ERO1xS-Pro Dual-Band FW version BZ_ERO1XP.025 . CNNVD reports a command injection vulnerability in this device/firmware. Connected documents provide limited technical detail: no explicit root cause, vulnerable component, exploit details, or CVSS data beyond...

PT-2023-25832 · Heights Telecom · Heights Telecom Ero1Xs-Pro Dual-Band

Name of the Vulnerable Software and Affected Versions: Heights Telecom ERO1xS-Pro Dual-Band FW version BZ ERO1XP.025 Description: The issue affects Heights Telecom ERO1xS-Pro Dual-Band devices. No information is provided about the estimated number of potentially affected devices worldwide or...

Heights Telecom ERO1xS-Pro 命令注入漏洞

Heights Telecom ERO1xS-Pro is a Dual-Band WiFi6 AX5400 MESH Extender from Heights Telecom. A security vulnerability exists in Heights Telecom ERO1xS-Pro Dual-Band FW BZERO1XP.025 version, which stems from the presence of a command injection vulnerability...

Tenda F1202 缓冲区错误漏洞

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which is caused by a buffer overflow in the page page of the fromP2pListFilter method...

ASUS RT-AC86U OS Command Injection Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from the Chinese company ASUS. The ASUS RT-AC86U suffers from an operating system command injection vulnerability that originates from not filtering the special characters of parameters in specific URLs, which can be exploited by a remote attacker wit...

Using LLMs to Create Bioweapons

Im not sure there are good ways to build guardrails to prevent this sort of thing: There is growing concern regarding the potential misuse of molecular machine learning models for harmful purposes. Specifically, the dual-use application of models for predicting cytotoxicity18 to create new poison...

nmstate bug fix and enhancement update

An update is available for nmstate. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Nmstate is a library with an accompanying command line tool that manages host...

Authorization

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilitie...

CVE-2023-20128 Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilitie...

CVE-2023-20128

CVE-2023-20128 affects Cisco Small Business RV320/RV325 Dual Gigabit WAN VPN Routers. The web-based management interface has multiple vulnerabilities due to insufficient validation of user input, allowing an authenticated, remote attacker with valid Administrator credentials to inject and execute...

CVE-2023-20073 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

CVE-2023-20117

The CVE-2023-20117 entry concerns Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers. The vulnerabilities stem from insufficient validation of user-supplied input in the devices’ web-based management interface, enabling an authenticated attacker with valid Administrator credentials...

D-Link DIR-819 安全漏洞

The D-Link DIR-819 is a wireless dual-band router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-819 that stems from the presence of a denial of service vulnerability...

TOTOLINK X5000R suffers from weak password vulnerability

The TOTOLINK X5000R is a Gigabit dual-band WiFi6 router. TOTOLINK X5000R suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

dual-language-waterbury.novuschoice.com Cross Site Scripting vulnerability OBB-3206836

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...