SUSE SLES12 Security Update : libconfuse0 (SUSE-SU-2022:3331-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3331-1 advisory. - CVE-2022-40320: Fixed a heap-based buffer over-read in cfgtildeexpand in confuse.c bsc1203326. Tenable has extracted the preceding...

CVE-2022-38308

TOTOLink A700RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2022-38308

TOTOLink A700RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2022-38308

TOTOLink A700RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

CVE-2022-38308

TOTOLink A700RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cstesystem. This vulnerability allows attackers to execute arbitrary commands via a crafted payload...

PT-2022-24358 · Totolink · Totolink A700Ru

Name of the Vulnerable Software and Affected Versions: TOTOLink A700RU version V7.4cu.2313 B20191024 Description: A command injection issue was discovered, allowing attackers to execute arbitrary commands via a crafted payload. This issue is related to the lang parameter in the cstesystem functio...

TOTOLINK A700RU 操作系统命令注入漏洞

TOTOLINK A700RU is a wireless dual-band router from China's Gion Electronics TOTOLINK. TOTOLINK A700RU V7.4cu.2313B20191024 suffers from an operating system command injection vulnerability, which originates from a command injection that can be performed via the lang parameter in the function...

CVE-2022-37078

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg...

CVE-2022-36482

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg...

CVE-2022-36462

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...

Stack overflow

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...

CVE-2022-37078

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the lang parameter at /setting/setLanguageCfg...

CVE-2022-36482

CVE-2022-36482 applies to TOTOLINK N350RT, version 9.3.5u.6139_B20201216, where a command injection flaw exists in the function setLanguageCfg exposed through the lang parameter . The vulnerability could allow arbitrary command execution with local access and could impact confidentiality, integri...

CVE-2022-36462

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg...

CVE-2022-36462

TOTOLINK A3700R V9.1.2u.6134_B20201202 is affected by a stack overflow in setLanguageCfg via the lang parameter. Root cause: improper handling of the lang input leading to stack overflow. Impact per CVSS is HIGH (local, no user interaction). No official patch details are provided in the sources; ...

OSV-2022-733 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50374 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

CVE-2022-32148

Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the...

[SECURITY] Fedora 35 Update: deepin-api-5.4.11-4.fc35

Go-lang bingding for dde-daemon...

lang-boden.de Cross Site Scripting vulnerability OBB-2747830

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 36 Update: golang-github-google-martian-3.1.0-9.fc36

Martian Proxy is a programmable HTTP proxy designed to be used for testing. Martian is a great tool to use if you want to: - Verify that all or some subset of requests are secure - Mock external services at the network layer - Inject headers, modify cookies or perform other mutations of HTTP...