985 matches found
CVE-2024-46551
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2024-7015 · Navidrome · Navidrome
Name of the Vulnerable Software and Affected Versions: Navidrome versions prior to 0.53.0 Description: The issue is related to SQL Injection and Authentication Bypass in Navidrome Music Server. Navidrome automatically adds parameters in the URL to SQL queries, which can be exploited to access...
PT-2024-39116 · Totolink · Totolink Ac1200 T8
Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 T8 version 4.1.5cu.861 B20230220 Description: A critical vulnerability has been found in the TOTOLINK AC1200 T8, affecting the setWiFiRepeaterCfg function of the file /cgi-bin/cstecgi.cgi. The manipulation of the password...
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...
OpenRapid RapidCMS 安全漏洞
OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A security vulnerability exists in OpenRapid RapidCMS v1.3.1, which originates from a SQL injection vulnerability via the password parameter on /resource/runlogin.php...
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...
PT-2024-31761 · Rapidcms · Rapidcms
Name of the Vulnerable Software and Affected Versions: RapidCMS version 1.3.1 Description: A SQL injection issue was discovered in RapidCMS, which occurs via the password parameter at the "/resource/runlogin.php" API endpoint. This allows for potential exploitation of the system. Recommendations:...
CVE-2024-45771
RapidCMS v1.3.1 contains a SQL injection via the password parameter at /resource/runlogin.php. Root cause appears to be unsanitized input in the login endpoint, enabling high-impact attacks (CVSS 3.1 base score 9.8, CRITICAL). Public exploit details are not provided in the documents. Some sources...
CVE-2024-45771
RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the password parameter at /resource/runlogin.php...
CVE-2024-42566
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...
School-Management-System 安全漏洞
School-Management-System is a school management system by the individual developer Jyothi Babu Araja. A security vulnerability exists in School-Management-System due to an SQL injection vulnerability in the password parameter of the login.php page...
PT-2024-30026 · Unknown · School Management System
Name of the Vulnerable Software and Affected Versions: School Management System affected versions not specified Description: The issue is related to a SQL injection vulnerability. It occurs via the password parameter at the "login.php" endpoint. There is no information provided about the estimate...
CVE-2024-42566
School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the password parameter at login.php...
PT-2024-30239 · Tenda · Tenda Fh1206
Name of the Vulnerable Software and Affected Versions: Tenda FH1206 version 02.03.01.35 Description: The issue is a stack overflow that allows attackers to cause a Denial of Service DoS via a crafted POST request. This is achieved by exploiting the pptpPPW parameter in the fromAdvSetWan function...
Tenda FH1206 安全漏洞
Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a buffer overflow vulnerability, which originates from a buffer overflow vulnerability in the PPPOEPassword parameter of the fromAdvSetWan function, which can be...
Tenda FH1201 缓冲区错误漏洞
The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from the PPPOEPassword parameter in the fromAdvSetWan function containing a denial of service. No detailed vulnerability details are provided at this time...
TOTOLINK A3100R password parameter buffer overflow vulnerability
TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A3100R version V4.1.2cu.5050B20200504, which originates from the password parameter of the loginauth function failing to correctly validate the length and siz...