4410 matches found
CVE-2024-28354
There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker can inject commands into the post request parameters usapps.@smb%d.username in the apply.cgi interface, thereby gaining root shell privileges...
CVE-2024-28383
Tenda AX12 v1.0 v22.03.01.16 was discovered to contain a stack overflow via the ssid parameter in the sub431CF0 function...
Honeywell PM43 < P10.19.050004 - Remote Code Execution Exploit
Exploit Title: Honeywell PM43 ' if htmlstartindex != -1: return responsetext:htmlstartindex else: return responsetext except requests.exceptions.RequestException as e: return f"Error: e" def main: parser = argparse.ArgumentParserdescription='Command Injection PoC for Honeywell PM43 Printers'...
Honeywell PM43 < P10.19.050004 - Remote Code Execution (RCE)
Exploit Title: Honeywell PM43 ' if htmlstartindex != -1: return responsetext:htmlstartindex else: return responsetext except requests.exceptions.RequestException as e: return f"Error: e" def main: parser = argparse.ArgumentParserdescription='Command Injection PoC for Honeywell PM43 Printers'...
CVE-2024-28338
A login bypass in TOTOLINK A8000RU V7.1cu.643B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie...
CVE-2024-2371 Information exposure vulnerability in Korenix JetI/O 6550
Information exposure vulnerability in Korenix JetI/O 6550 affecting firmware version F208 Build:0817. The SNMP protocol uses plaintext to transfer data, allowing an attacker to intercept traffic and retrieve credentials...
PT-2024-22396 · Totolink · Totolink A8000Ru
Name of the Vulnerable Software and Affected Versions: TOTOLINK A8000RU version V7.1cu.643 B20200521 Description: A login bypass issue allows attackers to login to Administrator accounts by providing a crafted session cookie. Recommendations: For TOTOLINK A8000RU version V7.1cu.643 B20200521,...
HPESBHF04614 rev.1 - Certain HPE Edgeline Servers Using Certain Intel Processors, INTEL-SA-00960, 2024.1 IPU - Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Edgeline e920t Server Blade - Prior to v2.0002-22-2024 HPE Edgeline e920 Server Blade - Prior to v2.0002-22-2024 HPE Edgeline e920d Server Blade - Prior to v2.0002-22-2024...
PT-2024-2219 · Canon +1 · C1127P +27
Name of the Vulnerable Software and Affected Versions: Canon i-SENSYS and Color imageCLASS series printers and multifunctional devices versions prior to firmware v12.07 and v03.09 Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier...
GL.iNet Router Security Vulnerability
GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet. A security vulnerability exists in the GL.iNet Router 4.x firmware version, which originated from a vulnerability that allows an attacker to bypass authentication and gain access to the router's web interface...
PT-2024-2264 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue was found in the function formSetSpeedWan of the file /goform/SetSpeedWan. The manipulation of the argument speed dir leads to a stack-based buffer overflow. This issue can be...
CVE-2024-27684
A Cross-site scripting XSS vulnerability in dlapn.cgi, dldongle.cgi, dlcfg.cgi, fwup.cgi and seama.cgi in D-Link GORTAC750A1FWv101b03 allows remote attackers to inject arbitrary web script or HTML via the url parameter...
PT-2024-12770 · Multilaser · Multilaser Re160
Name of the Vulnerable Software and Affected Versions: Multilaser RE160 firmware versions 5.07.51 pt MTL01 through 5.07.52 pt MTL01 Description: The issue allows attackers to bypass access control and gain complete access to the application by supplying a crafted cookie. This enables attackers to...
LinBle LBT T300-T390 Security Vulnerability
The LinBle LBT T300-T390 is a 4G industrial router from LinBle China. A security vulnerability exists in the LinBle LBT T300-T390 version v2.2.1.8, which stems from a buffer overflow in the apnname3g parameter of the setupEC20Apn method...
D-Link DIR-823G Security Vulnerability
The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G A1V1.0.2B05 version, which stems from a null pointer dereference vulnerability in the sub4484A8 function...
CVE-2024-1890 Clickjacking vulnerability in Sunny Webbox
Vulnerability whereby an attacker could send a malicious link to an authenticated operator, which could allow remote attackers to perform a clickjacking attack on Sunny WebBox firmware version 1.6.1 and earlier...
PT-2024-1948 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the sub 41D354 function of the D-Link DIR-823G router's firmware when handling the Cookie parameter. This can allow a remote attacker to execute...
CVE-2024-25746
Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42multi allows a remote attacker to execute arbitrary code via the addwhitenode function...
Tenda AC9 Security Vulnerability
Tenda AC9 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC9 v.3.0 firmware v.15.03.06.42multi version, which stems from the presence of a buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via the...