Lucene search
+L

38 matches found

Kitploit
Kitploit
added 2026/09/02 12:36 a.m.6 views

CVE-2020-35262

CVE-2020-35262: ثغرة XSS مخزّنة في جهاز التوجيه Digisol DG-HR3400 وصف الثغرة تم تحديد أن نقطة النهاية الضعيفة لا تحتوي على تحقق من صحة الإدخال من جانب الخادم وتفتقر إلى تصفية من جانب العميل لأي حقن برمجي خبيث. يمكن للمهاجم استخدام هذه الثغرة لحقن برمجيات خبيثة في نقطة النهاية ويتم تنشيط البرنامج...

6.1CVSS6.4AI score0.00863EPSS
SaveExploits2
Cvelist
Cvelist
added 2026/08/31 12:00 a.m.34 views

CVE-2026-51673

Incorrect access control in the setNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to alter time synchronization settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

0.00332EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/28 8:18 p.m.9 views

CVE-2026-51643

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

9.1CVSS0.00364EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/28 12:00 a.m.15 views

CVE-2026-51643

TOTOLINK T6 firmware version 4.1.5cu.748_B20211015 contains an incorrect access control flaw in the getNtpCfg function. An unauthenticated attacker can send a crafted POST request to /cgi-bin/cstecgi.cgi to retrieve NTP configuration and current time data , with no user interaction or prior privi...

9.1CVSS5.9AI score0.00364EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/28 12:00 a.m.9 views

EUVD-2026-67923

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

5.9AI score0.00364EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/28 12:00 a.m.31 views

CVE-2026-51643

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain NTP configuration and current time data via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

0.00364EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/26 7:54 p.m.37 views

CVE-2026-32833

CVE-2026-32833 affects Cudy LT300 3.0 firmware prior to 2.5.12. The vulnerability arises in the system time configuration interface, where an authenticated attacker can inject shell metacharacters into the cbid.system.ntp.current POST parameter via the NTP settings endpoint, enabling remote code ...

8.8CVSS6.7AI score0.02424EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/05 7:22 p.m.20 views

CVE-2026-7138

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The explo...

10CVSS7.5AI score0.01766EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/27 4:00 p.m.10 views

CVE-2026-7138 Totolink A8000RU CGI cstecgi.cgi setNtpCfg os command injection

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The explo...

10CVSS8.3AI score0.01766EPSS
SaveExploits0References5
CVE
CVE
added 2026/04/06 10:30 p.m.20 views

CVE-2026-5689

Totolink A7100RU (firmware 7.4cu.2313_b20191024) is affected by an OS command injection in the setNtpCfg function of /cgi-bin/cstecgi.cgi. Manipulating the tz argument can enable remote exploitation, and public exploits are available. Affected impact and realistic remediation details are not prov...

7.5CVSS6.9AI score0.01604EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/06 10:30 p.m.6 views

CVE-2026-5689

A vulnerability was detected in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setNtpCfg of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument tz results in os command injection. Remote exploitation of the attack is possible. The exploit is now...

7.5CVSS6.9AI score0.01604EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2026/03/02 12:00 a.m.9 views

D-Link DWR-M960: NTP file stack buffer overflow vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 has a stack buffer overflow vulnerability in its formNtp file. This vulnerability stems from an error in the operation of the submit-url parameter in the sub4611CC function within the NTP Configuration Endpoint...

9CVSS8.8AI score0.00642EPSS
SaveExploits1
NVD
NVD
added 2026/02/20 8:25 p.m.16 views

CVE-2026-2854

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The...

9CVSS0.00642EPSS
SaveExploits1References5
OSV
OSV
added 2026/02/20 8:25 p.m.13 views

CVE-2026-2854

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The...

8.8CVSS6.4AI score0.00642EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/02/20 7:02 p.m.6 views

CVE-2026-2854 D-Link DWR-M960 NTP Configuration Endpoint formNtp sub_4611CC stack-based overflow

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The...

9CVSS8.8AI score0.00642EPSS
SaveExploits1References5
CVE
CVE
added 2026/02/20 7:02 p.m.45 views

CVE-2026-2854

DVE-2026-2854 affects D-Link DWR-M960 firmware 1.01.07. The flaw is in the NTP Configuration Endpoint, specifically the sub_4611CC function in /boafrm/formNtp, where manipulating the submit-url argument can trigger a stack-based buffer overflow. Remote exploitation is possible, with exploit resea...

9CVSS8.7AI score0.00642EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/20 7:02 p.m.47 views

CVE-2026-2854 D-Link DWR-M960 NTP Configuration Endpoint formNtp sub_4611CC stack-based overflow

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The...

9CVSS0.00642EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/02/20 7:02 p.m.6 views

CVE-2026-2854

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The...

9CVSS6.2AI score0.00642EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/20 12:00 a.m.17 views

PT-2026-21288

A flaw has been found in D-Link DWR-M960 1.01.07. This impacts the function sub 4611CC of the file /boafrm/formNtp of the component NTP Configuration Endpoint. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be launched remotely. The...

9CVSS6.2AI score0.00642EPSS
SaveExploits1References5
NVD
NVD
added 2026/01/09 10:15 a.m.11 views

CVE-2025-64091

This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device...

8.8CVSS0.00332EPSS
SaveExploits0References1
Rows per page
Query Builder