4432 matches found
PT-2022-22234
Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the DelDNSHnList interface at the "/goform/aspForm" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, consider restricting...
CVE-2022-34606: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditvsList parameter at /dotrace.asp...
H3C Magic R200 缓冲区错误漏洞
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the ipqoslanipeditlist interface of goform/aspForm was found to contain a stack overflow...
H3C Magic R200 缓冲区错误漏洞
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V200R004L02 version, which originated when the DelDNSHnList interface of oform/aspForm was found to contain a stack overflow...
PT-2022-22231
Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the EditSTList interface at the "/goform/aspForm" API endpoint. This issue affects the H3C Magic R200 device. Recommendations For H3C Magic R200 versi...
PT-2022-22236
Name of the Vulnerable Software and Affected Versions H3C Magic R200 version R200V200R004L02 Description A stack overflow issue was discovered via the HOST parameter at the "/dotrace.asp" API endpoint. Recommendations For H3C Magic R200 version R200V200R004L02, consider restricting access to the...
CVE-2022-34602: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the ipqoslanipeditlist interface at /goform/aspForm...
H3C Magic R200 缓冲区错误漏洞
H3C Magic R200 is a wireless router device. H3C Magic R200 AJAX/ajaxget processing ajaxmsg parameter has a buffer overflow vulnerability, which can be exploited by remote attackers to submit special requests that can crash the service or execute arbitrary code in application context...
CVE-2022-34599: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm...
CVE-2022-34600: Out-of-bounds Write
H3C Magic R200 R200V200R004L02 was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm...
CVE-2022-2192
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...
CVE-2022-2192
CVE-2022-2192 describes a forced browsing vulnerability in HYPR Server spanning versions 6.10 to 6.15.1. An attacker with a valid one-time recovery token can perform path tampering on the Magic Link page to elevate privileges, yielding a remote, network-attack surface with high impact to confiden...
HYPR Server 安全漏洞
HYPR and HYPR Server are both products of HYPR, Inc.HYPR is a security application that implements password-less security.HYPR Server is a server. A security vulnerability exists in HYPR Server versions 6.10 through 6.15.1, which stems from a forced browsing vulnerability that allows a remote...
CVE-2022-2192: Direct Request
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...
magic-bike-lapalma.com Cross Site Scripting vulnerability OBB-2793266
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
HUAWEI EMUI/Magic UI licensing issue vulnerability
HUAWEI EMUI / Magic UI are both an Android-based mobile operating system developed by China's Huawei HUAWEI. HUAWEI EMUI / Magic UI has an authorization issue vulnerability, which stems from improper control of the Bluetooth module permissions and is used by attackers to affect the integrity of t...
HUAWEI Magic UI 安全漏洞
HUAWEI Magic UI is a smart device operating system from Chinese company Huawei HUAWEI. A security vulnerability exists in HUAWEI Magic UI version 4.0.0, which is exploited by attackers to compromise device confidentiality...
Huawei Emui and Magic UI Buffer Overflow Vulnerability (CNVD-2022-57612)
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. buffer overflow vulnerability exists in Huawei Emui and Magic UI, which can be exploited by attackers to cause a buffer overflow and execute arbitrary code on the system, or...