CVE-2023-27805

CVE-2023-27805 concerns the H3C Magic R100 router (firmware for R100V100R005.bin). The vulnerability is a stack overflow in the EditSTList interface at /goform/aspForm, allowing a crafted payload to trigger a Denial of Service. The publicly documented impact is availability loss (DoS); no explici...

CVE-2023-27806: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipdellist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27807: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27805: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27810: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27802: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-29171: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-site Scripting XSS vulnerability in Magic Post Thumbnail plugin = 4.1.10 versions...

CVE-2023-27802

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27804: Out-of-bounds Write

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

H3C Magic R100 缓冲区错误漏洞

The H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100 R100V100R005.bin version, which originates from a discovery containing a stack overflow via the ipqoslanipeditlist interface of /goform/aspForm. An attacker could exploit the...

CVE-2023-27807

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27808

CVE-2023-27808 describes a stack overflow in H3C Magic R100 router component at the DeltriggerList interface (/goform/aspForm) of the R100V100R005.bin, enabling a crafted payload to trigger a Denial of Service. Affected product: H3C Magic R100 (R100V100R005.bin). Underlying cause: stack overflow ...

H3C Magic R100 缓冲区错误漏洞

The H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100 R100V100R005.bin version, which originates from a discovery containing a stack overflow via the EdittriggerList interface of /goform/aspForm. An attacker exploits the vulnerability to...

PT-2023-21357

Name of the Vulnerable Software and Affected Versions H3C Magic R100 version R100V100R005.bin Description A stack overflow issue was discovered via the Delstlist interface at the "/goform/aspForm" API endpoint. This issue allows attackers to cause a Denial of Service DoS by sending a crafted...

WordPress plugin Magic Post Thumbnail 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-27808

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27801

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

CVE-2023-27803

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

webpack: avoid cross-realm objects

A flaw was found in the webpack package, which could allow a remote attacker to bypass security restrictions caused by the mishandling of the magic comment feature by the ImportParserPlugin.js. This flaw allows an attacker to gain access to the real global object by sending a specially-crafted...

Magic Post Thumbnail < 4.1.11 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...