Open Source SACCO Management System 安全漏洞

Open Source SACCO Management System is an open source SACCO management system by Mayuri K., an individual developer. A security vulnerability exists in Open Source SACCO Management System v1.0, which is caused by a SQL injection vulnerability in the password parameter of /sacco/ajax.php...

The vulnerability of the setWifiConfig() function in the /goform/setModules file of the Tenda W18E router’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the setWifiConfig function in the /goform/setModules file of the Tenda W18E router’s microprogramming system is related to buffer overflow during the processing of the wifiPwd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a...

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 software allows a hacker to execute arbitrary code.

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2025-3203

A vulnerability classified as problematic was found in Tenda W18E 16.01.0.11. Affected by this vulnerability is the function formSetAccountList of the file /goform/setModules. The manipulation of the argument Password leads to stack-based buffer overflow. The attack can be launched remotely. The...

The vulnerability of the formQuickIndex() function in the Tenda F1202 router’s microprogramming software allows a hacker to compromise the accessibility of the protected information.

The vulnerability of the formQuickIndex function in the Tenda F1202 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability could allow a malicious actor to compromise th...

Tenda W18E 安全漏洞

The Tenda W18E is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W18E /goform/setModules handling of the wifiPwd parameter, which can be exploited by an attacker to submit a special request that can crash the application and cause a denial of...

CVE-2025-1956

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely...

Code-Projects Shopping Portal 注入漏洞

Code-Projects Shopping Portal is a Code-Projects open source shopping site. An injection vulnerability exists in Code-Projects Shopping Portal version 1.0, which stems from an incorrect manipulation of the parameter password that can lead to sql injection...

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

CVE-2025-25746

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...

CVE-2024-32355

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-35399

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

CVE-2025-25745

CVE-2025-25745 concerns a stack-based buffer overflow in the D-Link DIR-853 A1 firmware (FW1.20B07), triggered by the Password parameter in the SetQuickVPNSettings module. This affects the device when exposed to network access and, per the CVSS 3.1 vector, requires user interaction and has high i...

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...