CVE-2024-41462

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient...

CVE-2024-41466

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/NatStaticSetting...

CVE-2024-41460

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic...

CVE-2024-41466

CVE-2024-41466 – Tenda FH1201 v1.2.0.14 reports a stack-based buffer overflow exploitable via the page parameter in /ip/goform/NatStaticSetting. Affected component is the NatStaticSetting API; root cause is a buffer overflow triggered by the page parameter. CVSS v3.1 score is 7.5 (HIGH) with netw...

CVE-2024-41460

The CVE-2024-41460 affects Tenda FH1201 firmware 1.2.0.14, where a stack-based buffer overflow is reachable via the entries parameter in ip/goform/RouteStatic. The issue is tied to the RouteStatic function and, per PT Security, could allow a remote attacker to execute arbitrary code. Public detai...

CVE-2024-41463

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat...

CVE-2024-41465

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm...

CVE-2024-41464

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic...

CVE-2024-41463

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat...

Google admits it can’t quite quit third-party cookies

For more than a year, Google has said it would phase out the third-party tracking cookies that power much of its advertising business online, proposing new ideas that would allegedly preserve user privacy while still providing businesses with steady revenue streams. This week, Google tossed much ...

Exposure Of Sensitive Information

org.apache.rocketmq, rocketmq-all is vulnerable to the Exposure of Sensitive Information. The vulnerability is due to specific interfaces that allow an attacker with regular user privileges or listed in the IP whitelist to acquire the administrator's account and password. This vulnerability enabl...

CVE-2024-40051

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

CVE-2024-23321

For RocketMQ versions 5.2.0 and below, under certain conditions, there is a risk of exposure of sensitive Information to an unauthorized actor even if RocketMQ is enabled with authentication and authorization functions. An attacker, possessing regular user privileges or listed in the IP whitelist...

Hikvision IP Cameras Improper Authentication (CVE-2013-4976)

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid502302;...

Hikvision IP Cameras Privilege Escalation (CVE-2013-4975)

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid502305; scriptversion"1.2";...

Tenda O3 安全漏洞

Tenda O3 is an outdoor wireless bridge from Tenda, China. A security vulnerability exists in the Tenda O3, which stems from a stack-based buffer overflow due to manipulation of the ip/localPort/public Port/app parameter in the fromVirtualSet function. No details of the vulnerability are available...

CVE-2024-40051

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

PT-2024-28768 · Ip Guard · Ip Guard

Name of the Vulnerable Software and Affected Versions: IP Guard version 4.81.0307.0 Description: The issue allows for an arbitrary file read via the file name parameter. Recommendations: For IP Guard version 4.81.0307.0, consider restricting access to the file name parameter to minimize the risk ...

CVE-2024-40051

IP Guard v4.81.0307.0 was discovered to contain an arbitrary file read vulnerability via the file name parameter...

CVE-2024-40051

CVE-2024-40051 affects IP Guard v4.81.0307.0, which is reported to contain an arbitrary file read vulnerability exploitable via the file name parameter. Public sources across Red Hat and NVD reiterate the same description: the issue allows reading arbitrary files, with CVSS 3.1/AV:N/AC:L/PR:N/UI:...