Tenda FH1206 安全漏洞

Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a buffer overflow vulnerability that originates from a buffer overflow vulnerability in the page parameter of the fromSafeUrlFilter function, which can be exploited by...

PT-2024-30238 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is related to a stack overflow in the fromVirtualSer function via the page parameter. This allows attackers to cause a Denial of Service DoS by sending a crafted POST request...

PT-2024-30236 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is related to a stack overflow in the frmL7ImForm function via the page parameter. This allows attackers to cause a Denial of Service DoS via a crafted POST request to the affected...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. The Tenda FH1206 suffers from a buffer overflow vulnerability that stems from a buffer overflow vulnerability contained in the page parameter of the fromVirtualSer function. No details of the vulnerability are provided at this time...

Tenda FH1201 缓冲区错误漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the page parameter in the fromNatlimit function containing a stack overflow. An attacker could exploit this vulnerability to cause a Denial of Service DoS...

Tenda FH1201 缓冲区错误漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the page parameter in the fromqossetting function containing a stack overflow. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2024-7732

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

CVE-2024-7731

Dr.ID Access Control System from SECOM does not properly validate a specific page parameter, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. A stack overflow vulnerability exists in the formSafeEmailFilter function in the Tenda FH1206 /goform/SafeEmailFilter that handles the page parameter, which can be exploited by a remote attacker to submit a special request that could crash t...

PT-2024-38386 · Unknown · Airline Reservation System

Name of the Vulnerable Software and Affected Versions: Airline Reservation System version 1.0 Description: A critical issue has been found in the Airline Reservation System, affecting the /index.php file. The manipulation of the page argument leads to file inclusion. This issue can be exploited...

itsourcecode Airline Reservation System 安全漏洞

itsourcecode Airline Reservation System is an airline reservation system from itsourcecode, Inc. A security vulnerability exists in version 1.0 of itsourcecode Airline Reservation System, which stems from an incorrect manipulation of the parameter page can lead to file inclusion...

PT-2024-7661 · Tenda · Tenda Fh1206

Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is caused by a stack overflow via the page parameter in the fromSafeClientFilter function, allowing attackers to cause a Denial of Service DoS via a crafted POST request to the affected...

The vulnerability of Brother HL-L2360D, DCP-1610W, DCP-L2550DW, HL-L2390DW, HL-L2395DW, MFC-J4620DW, MFC-J6945DW, MFC-L2710DN, MFC-L2710DW, MFC-L2770DW, MFC-L8690CDW, TD-2130N printers’ microprogramming software allows a hacker to redirect users to any desired URL address.

The vulnerability of Brother HL-L2360D, DCP-1610W, DCP-L2550DW, HL-L2390DW, HL-L2395DW, MFC-J4620DW, MFC-J6945DW, MFC-L2710DN, MFC-L2710DW, MFC-L2770DW, MFC-L8690CDW, and TD-2130N printers relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious...

Bolt CMS 跨站脚本漏洞

Bolt CMS is Bolt CMS open source PHP-based open source content management system . A cross-site scripting vulnerability exists in Bolt CMS version 3.7.1, which stems from the parameter body in the file /preview/page can lead to cross-site scripting. No detailed vulnerability details are currently...

CVE-2024-37859

Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php...

PT-2024-37219 · WordPress · Ultimate Classified Listings

Name of the Vulnerable Software and Affected Versions: The Ultimate Classified Listings WordPress plugin versions prior to 1.3 Description: The issue allows unauthenticated users to access PHP files on the server from the listings page due to a lack of validation for the ucl page and layout...

PT-2024-29410 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A stack-based buffer overflow issue was found via the page parameter at the "/ip/goform/DhcpListClient" API endpoint. Recommendations: For Tenda FH1201 version 1.2.0.14, avoid using the page paramete...

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a page parameter on ip/goform/DhcpListClient that contains a stack-based buffer overflow vulnerability. No detailed vulnerability details are provided at this...

PT-2024-29414 · Tenda · Tenda Fh1201

Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A stack-based buffer overflow issue was found via the page parameter at the "/ip/goform/NatStaticSetting" API endpoint. Recommendations: For Tenda FH1201 version 1.2.0.14, avoid using the page...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pagination feature used in searches and filters by injecting a malformed URL into the GET parameter perpage Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...