PT-2024-34659 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 24.10.0 Description: A Stored Cross-Site Scripting XSS vulnerability in the Device Overview page allows authenticated users to inject arbitrary JavaScript through the overwrite ip parameter when editing a device. Th...

CVE-2024-25254

SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter...

CVE-2024-25254

SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter...

Foundstone SuperScan 安全漏洞

Foundstone SuperScan is a free connection-based port scanning software from Foundstone, Inc. A security vulnerability exists in Foundstone SuperScan version v4.1 that stems from the discovery of a contained buffer overflow issue via the Hostname/IP parameter...

CVE-2024-25254

SuperScan version 4.1 is vulnerable to a buffer overflow occurring via the Hostname/IP parameter . This vulnerability, identified as a CWE-120 (Buffer Copy without Checking Size of Input), could grant an attacker full control over the affected system. To mitigate this risk, users are advised to p...

CVE-2024-25254: Buffer Copy without Checking Size of Input

SuperScan v4.1 was discovered to contain a buffer overflow via the Hostname/IP parameter...

CVE-2024-52025

Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoelocalip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51242: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...

ELADMIN 安全漏洞

ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN v2.7 and earlier versions, which stems from a server-side request forgery in the HTTP Body ip parameter...

Tenda O6 安全漏洞

Tenda O6 is a wireless bridge from Tenda, China. Tenda O6 version 1.0.0.7 suffers from a buffer overflow vulnerability, which originates from the parameter ip/localPort/publicPort/app of the fromVirtualSet function of file /goform/setPortForward fails to properly validate the length and size of t...

Tenda O3 安全漏洞

Tenda O3 is an outdoor wireless bridge from Tenda, China. A security vulnerability exists in the Tenda O3, which stems from a stack-based buffer overflow due to manipulation of the ip/localPort/public Port/app parameter in the fromVirtualSet function. No details of the vulnerability are available...

CVE-2024-38894

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

CVE-2024-38894

The WAVLINK WN551K1 wireless router is vulnerable to a command injection vulnerability. The flaw exists because the /cgi-bin/touchlist_sync.cgi API endpoint fails to properly filter command special characters within the IP parameter. An attacker could potentially exploit this to execute arbitrary...

CVE-2024-38894

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

WAVLINK WN551K1 安全漏洞

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the IP parameter of /cgi-bin/touchlistsync.cgi failing to properly filter constructed command special characters, commands, and so on...

CVE-2024-38894: Improper Neutralization of Special Elements used in a Command

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

CVE-2024-38894

WAVLINK WN551K1 found a command injection vulnerability through the IP parameter of /cgi-bin/touchlistsync.cgi...

Tenda W20E 安全漏洞

The Tenda W20E is a wireless router developed by Tenda to provide wireless network connectivity and management capabilities. The Tenda W20E suffers from a stack buffer overflow vulnerability that originates from improper handling of the remoteIP parameter in the formSetRemoteWebManage function in...

CVE-2024-2764

A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument endIP leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...

TOTOLINK X6000R 操作系统命令注入漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R version 9.4.0cu.85220230719 suffers from an operating system command injection vulnerability that originates from a security issue in the setDiagnosisCfg function in /cgi-bin/cstecgi.cgi in the...