PT-2023-6461

Name of the Vulnerable Software and Affected Versions D-Link DI-7003GV2 versions 23.08.25D1 and earlier D-Link DI-7100G+V2 versions 23.08.23D1 and earlier D-Link DI-7100GV2 version 23.08.23D1 D-Link DI-7200G+V2 versions 23.08.23D1 and earlier D-Link DI-7200GV2 versions 23.08.23E1 and earlier D-Li...

PT-2023-6459 · D Link · Di-7200Gv2 +4

Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 versions 23.08.25D1 and before D-Link DI-7100G+V2 versions 23.08.23D1 and before D-Link DI-7100GV2 version 23.08.23D1 D-Link DI-7200G+V2 versions 23.08.23D1 and before D-Link DI-7200GV2 versions 23.08.23E1 and before D-Link...

The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tgfile.asp component of the D-Link DI-7200G V2 router microprogramming system is related to the issue where operations are performed outside the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to compromise the...

D-Link Di-7200G Buffer Error Vulnerability

The D-Link Di-7200G is a Gigabit enterprise router from China's AUO D-Link. A security vulnerability exists in the D-Link Di-7200G, which can be caused by manipulating the fn parameter in the tgfile.asp function to cause a stack overflow...

CVE-2023-43197: Out-of-bounds Write

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function...

fn-consulting.at Cross Site Scripting vulnerability OBB-3693741

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-25871

All versions of package querymen are vulnerable to Prototype Pollution if the parameters of exported function handlertype, name, fn can be controlled by users without any sanitization. Note: This vulnerability derives from an incomplete fix of "CVE-2020-7600"...

PT-2022-17578

Name of the Vulnerable Software and Affected Versions querymen affected versions not specified Description The issue arises from the handlertype, name, fn function, where the parameters can be controlled by users without proper sanitization, leading to Prototype Pollution. This is a result of an...

PT-2022-38055

Уязвимость функции find module check fn модуля kernel/cfi.c ядра операционной системы Linux связана с ошибками управления состоянием. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-36892

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details include a crash type of Stack-buffer-overflow WRITE 4, and the crash state involve...

PT-2021-27994

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack buffer overflow error, which occurs during the execution of certain functions. Specifically, the functions fn ElIn evaluate...

PT-2021-16248

Name of the Vulnerable Software and Affected Versions: SEO Booster WordPress plugin versions prior to 3.8 Description: The issue allows for authenticated SQL injection via the "fn my ajaxified dataloader ajax" AJAX request. The $ REQUEST'order'0'dir' parameter is not properly escaped, leading to...

PT-2021-28040

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported, identified as a Stack-use-after-return READ 6 issue. The crash state involves several functions, including sta prop equal fn, wm...

RUSTSEC-2021-0005 Double drop upon panic in 'fn map_array()'

Affected versions of this crate did not guard against panic within the user-provided function f 2nd parameter of fn maparray, and thus panic within f causes double drop of a single object. The flaw was corrected in the 0.4.0 release by wrapping the object vulnerable to a double drop within...

async-metronome (0.2.0), bach (>=0.0.1, <=0.0.2) +18 more potentially affected by CVE-2020-35926 via nanorand (0.4.4)

nanorand CARGO version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - async-metronome 0.2.0 - bach =0.0.1, =0.8.6, =0.1.0, =0.1.0, =0.4.3, =0.1.0, =0.0.1, =0.1.3, =0.1.4 - rune-cli 0.7.0 and more Source cves:...

Authentication Bypass

php-horde-gollem is vulnerable to authentication bypass. The File Manager gollem module allows remote attackers to bypass Horde authentication for file downloads via a malicious fn parameter that corresponds to the exact filename...

fn-kleinanzeigen.de Cross Site Scripting vulnerability OBB-1298802

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-6120

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...

PT-2020-18934

Name of the Vulnerable Software and Affected Versions OS4Ed openSIS version 7.3 Description A SQL injection issue exists in the CheckDuplicateStudent.php page. The fn parameter in this page is vulnerable to SQL injection. An attacker can trigger this issue by making an authenticated HTTP request ...

CVE-2020-6120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability exists in the CheckDuplicateStudent.php page of OS4Ed openSIS 7.3. The fn parameter in the page CheckDuplicateStudent.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...