The vulnerability of the httpGetEnv() function (/userRpm/WanStaticIpV6CfgRpm.htm) in the TP-Link TL-WR841ND router software allows a attacker to cause a service failure.

The vulnerability of the httpGetEnv function /userRpm/WanStaticIpV6CfgRpm.htm in the TP-Link TL-WR841ND router software is related to buffer overflows caused by improper cleaning or resource release when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to cause...

CVE-2024-34944

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 parameter at ip/goform/DhcpListClient...

CVE-2025-25897: Out-of-bounds Write

A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2022-25305

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the IP parameter found in the /includes/class-wp-statistics-ip.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when site...

PT-2026-3432

Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description A flaw exists in the Totolink LR350 device. This issue is located within the setDiagnosisCfg function of the /cgi-bin/cstecgi.cgi file, part of the POST Request Handler component...

PT-2024-17010 · WordPress · Country Blocker

Name of the Vulnerable Software and Affected Versions: Country Blocker plugin for WordPress versions up to, and including, 3.2 Description: The issue is related to Reflected Cross-Site Scripting via the ip parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-11459: Improper Neutralization of Input During Web Page Generation

The Country Blocker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ip' parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVE-2024-52755

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the hostip parameter in the ipsecroadasp function...

The vulnerability in the pppoe.cgi script of NETGEAR’s router microprogramming software for the XR300, R7000P, and R6400 v2 allows a hacker to cause a service failure.

The vulnerability of the pppoe.cgi script in NETGEAR’s microprogrammed router software, including the XR300, R7000P, and R6400 v2 models, stems from a buffer overflow issue during the processing of the pppoelocalip parameter. Exploiting this vulnerability allows an attacker to initiate a...

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-52711

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ippositionasp function via the ip parameter...

CVE-2024-52711

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ippositionasp function via the ip parameter...

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-52759

CVE-2024-52759 affects the D-LINK DI-8003, version 16.07.26A1, where a buffer overflow occurs in the ip_position_asp function triggered by the ip parameter. Public sources describe potential arbitrary code execution or denial of service vectors, with the NVD noting a CRITICAL severity (CVSSv3.1: ...

CVE-2024-52711: Buffer Copy without Checking Size of Input

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ippositionasp function via the ip parameter...

CVE-2024-52711

The D-Link DI-8100 wireless broadband router (version 16.07.26A1 ) is vulnerable to a Buffer Overflow in the ip_position_asp function. This flaw occurs because the function fails to properly validate the length and size of the input data provided via the ip parameter. An attacker could exploit th...

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-52759: Buffer Copy without Checking Size of Input

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function...

CVE-2024-51495 LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the Device Overview page allows authenticated users to inject arbitrary JavaScript through the "overwriteip" parameter when editing a device. This vulnerability results i...

Cross-site Scripting (XSS)

Overview librenms/librenms is a fully featured network monitoring system that provides a wealth of features and device support. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the overwriteip parameter in dev-overview-data.inc.php. PoC Pass in an overwriteip...