Tenda AX180 Stack Overflow Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China.Tenda AX1803 is vulnerable to a stack overflow vulnerability. The vulnerability is caused by improper boundary checking of the fromSetIpMacBind function. An attacker could use this vulnerability to cause a buffer overflow and execu...

Tenda AX180 Stack Overflow Vulnerability (CNVD-2022-78483)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China.Tenda AX1803 is vulnerable to a stack overflow vulnerability caused by improper boundary checking of the fromSetWifiGusetBasic function. An attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code...

Tenda AX12 Buffer Overflow Vulnerability (CNVD-2023-15694)

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A security vulnerability exists in Tenda AX12 version V22.03.01.21CN, no detailed vulnerability details are available at this time...

Cross site request forgery (csrf)

D-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows unauthenticated attackers to cause a Denial of Service DoS via a crafted HTTP connection request...

Cilium host policy bypass in endpoint-routes mode with dual-stack

Impact This vulnerability allows bypassing host policies for IPv6 traffic coming from a Cilium-managed pod and destined to the host-network namespace e.g., to a host-network pod. Host policy enforcement on IPv4 or for traffic coming from outside the node is not affected. Cilium is only affected b...

GHSA-WC5V-R48V-G4VH Cilium host policy bypass in endpoint-routes mode with dual-stack

Impact This vulnerability allows bypassing host policies for IPv6 traffic coming from a Cilium-managed pod and destined to the host-network namespace e.g., to a host-network pod. Host policy enforcement on IPv4 or for traffic coming from outside the node is not affected. Cilium is only affected b...

Business logic error: Not able to access newly created admin account with the username admin with the password

Hello team, recently I found that I'm able to create dual admin via the same username, by creating a dual admin account we maybe not be able login the newly created admin user-named account. 2. For example, the default username and password of nakama dashboard will be admin & password 3. After...

Tenda AC23 WifiBasicSet function stack overflow vulnerability

Tenda AC23 is a dual-band gigabit wireless router from Tenda, China.A stack overflow vulnerability exists in Tenda AC23 v16.03.07.44, which stems from a lack of proper validation of the length of the WifiBasicSet function. An attacker could exploit this vulnerability to cause the execution of...

Tenda AX1803 Command Execution Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China.Tenda AX1803 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands...

TOTOLINK T6 FUN_004133c4 function stack overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.TOTOLINK T6 version V4.1.9cu.5179B20201015 is vulnerable to a stack overflow vulnerability, which originates from the desc, week, sTime, eTime parameters in the FUN004133c4 function for The input data is not checked f...

TOTOLINK T6 FUN_00413be4 function stack overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN00413be4 function not checking its length for input data. A remote attacker can exploi...

TOTOLINK T6 FUN_0041cc88 function stack overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the command parameter in the FUN0041cc88 function not checking its length for input data. An attacker could exploit...

GitLab 信息泄露漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An information disclosure vulnerability exists in GitLab CE/EE versions 13.4...

GSD-2022-1002526 heap buffer overflow in OpenSSL version 3.0.4

In OpenSSL version 3.0.4 a heap buffer overflow exists in the AVX512 support that can be attacked via network resulting in code execution. This is reachable via four code paths: RSAZ 1024, RSAZ 512, Dual 1024 RSAZ, and Default constant-time Montgomery modular exponentiation. Please note this issu...

CVE-2022-30023

The CVE-2022-30023 issue affects Tenda ONT GPON AC1200 Dual Band WiFi HG9 (firmware v1.0.1). It is a command-injection vulnerability exploitable via the Ping function, enabling remote code execution with network access and high impact on confidentiality, integrity, and availability (as reflected ...

PT-2022-19976

Name of the Vulnerable Software and Affected Versions Tenda ONT GPON AC1200 Dual band WiFi HG9 version 1.0.1 Description The issue is related to Command Injection via the Ping function. Recommendations For Tenda ONT GPON AC1200 Dual band WiFi HG9 version 1.0.1, consider disabling the Ping functio...

D-Link DIR816L Remote Code Execution Vulnerability

The D-Link DIR816 is a dual-band router. A remote code execution vulnerability exists in D-Link DIR816LFW206b01, which stems from the value parameter of shareport.php failing to properly filter special elements of the constructed snippet. An attacker can exploit this vulnerability to cause...

Siemens JT2Go and Teamcenter Visualization Dual Release Vulnerability (CNVD-2022-36381)

Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2Go and Teamcenter Visualization are vulnerable and can be exploited by attackers to The vulnerability can be exploited to...

ZTE ZXHN F680 Cross-Site Scripting Vulnerability

ZTE ZXHN F680 is a dual-band GPON home gateway from ZTE China. A cross-site scripting vulnerability exists in the ZTE ZXHN F680 version 6.0.10p3n20, which originates from the lack of checksum filtering of user-supplied and output data in the gateway name. An authenticated attacker can exploit thi...

TOTOLINK A3002RU has command execution vulnerability

TOTOLINK A3002RU is a Gigabit dual-band router. a command execution vulnerability exists in TOTOLINK A3002RU, which can be exploited by attackers to gain server privileges...