7896 matches found
PT-2025-29138 · Unknown · Easy File Sharing Ftp Server
Name of the Vulnerable Software and Affected Versions: Easy File Sharing HTTP Server version 7.2 Description: A stack-based buffer overflow vulnerability exists in the application. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long...
PT-2025-29349 · Tenda · Tenda Fh451
Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: A critical vulnerability exists in Tenda FH451. The manipulation of the page argument in the frmL7ProtForm function within the HTTP POST Request Handler, located at the /goform/L7Prot endpoint, leads t...
The vulnerability of the built-in web server boa (/boafrm/formPortFw) of TOTOLINK N302R Plus router’s microprogramming software allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the built-in web server boa /boafrm/formPortFw of TOTOLINK N302R Plus router microprogramming software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failu...
The vulnerability of the formAutoDetecWAN_wizard4() function (/goform/formAutoDetecWAN_wizard4) in the D-Link DIR-619L router software allows a attacker to cause a service failure.
The vulnerability of the formAutoDetecWANwizard4 function /goform/formAutoDetecWANwizard4 of the D-Link DIR-619L router’s microprogramming software is related to the copying of buffer contents without checking the size of input data during the processing of the curTime parameter. Exploiting this...
The vulnerability of the config_3g_para function in the microprogramming software of the LBT-T300-T310 industrial router allows a hacker to execute arbitrary code.
The vulnerability of the config3gpara function in the microprogramming software of the LBT-T300-T310 industrial router lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a...
PT-2025-29314 · Tenda · Tenda Fh1201
Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A critical vulnerability exists in the HTTP POST Request Handler component of the affected product. The fromSafeUrlFilter function within the /goform/fromSafeUrlFilter file is susceptible to a buffer...
PT-2025-29309 · Tenda · Tenda Fh1201
Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A critical vulnerability exists in the Tenda FH1201. The fromRouteStatic function within the HTTP POST Request Handler, located in the file /goform/fromRouteStatic, is susceptible to a buffer overflo...
The vulnerability of the formWpsStart() function (/goform/formWpsStart) of the Belkin F9K1122 Wi-Fi range extender software allows a hacker to execute arbitrary code.
The vulnerability of the formWpsStart function /goform/formWpsStart of the Belkin F9K1122 Wi-Fi range extender software lies in the reading of data beyond the buffer boundaries in memory during the processing of the pinCode parameter. Exploiting this vulnerability could allow a remote attacker to...
PT-2025-29307 · Tenda · Tenda Fh1201
Name of the Vulnerable Software and Affected Versions: Tenda FH1201 version 1.2.0.14 Description: A critical vulnerability exists in the Tenda FH1201. The vulnerability affects the formWrlsafeset function within the /goform/AdvSetWrlsafeset file of the HTTP POST Request Handler component...
CVE-2025-34057
An information disclosure vulnerability exists in Ruijie NBR series routers known to affect NBR2000G, NBR1300G, and NBR1000 models via the /WEBVMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker ca...
CVE-2025-24334
The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator MNO internal RAN management network...
The vulnerability of Nokia’s Single Radio Access Network management platform lies in the fact that system data can be disclosed to unauthorized individuals, allowing a intruder to gain unauthorized access to protected information.
The vulnerability of the Nokia Single RAN network management platform lies in the ability to expose system data to unauthorized individuals. Exploiting this vulnerability could allow a hacker to gain unauthorized access to protected information by sending a specially crafted POST request...
CVE-2025-6953
A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is...
CVE-2025-6940
A vulnerability classified as critical was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflo...
CVE-2025-6939
A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...
The vulnerability of the websReadEvent() function in Intelbras RX 1500 router microprogramming software allows a intruder to execute arbitrary code or cause a service failure.
The vulnerability of the websReadEvent function in Intelbras RX 1500 router microprogramming software is related to integer overflow during the processing of the http header field. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sendi...
DLink DIR-859 1.05 & 1.06B01 Path Traversal
The version of DLink installed on the remote host is prior to 1.07b03. It is, therefore, affected by a path traversal vulnerability as referenced in the vendor advisory. - A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown...
CVE-2025-34073
An unauthenticated command injection vulnerability exists in stamparm/maltrail Maltrail versions =0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input...
CVE-2025-40734
Reflected Cross-Site Scripting XSS vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirmpassword parameters in /register.php...