PT-2025-4141

Name of the Vulnerable Software and Affected Versions mySCADA myPRO affected versions not specified Description The issue concerns the inadequate neutralization of POST requests sent to a specific port with email information. This could be exploited by an attacker to execute arbitrary commands on...

Tenda AC15 安全漏洞

The Tenda AC15 is a wireless router from the Chinese company Tenda. A command execution vulnerability exists in Tenda AC15 version V15.03.05.20, which stems from the goform/SetIPTVCfg interface failing to properly filter constructed command special characters, commands, etc. This vulnerability ca...

The vulnerability of the fromNatlimit function in the microprogramming software for Tenda FH1201 allows a hacker to trigger a service failure.

The vulnerability of the fromNatlimit function in the microprogramming software for Tenda FH1201 is related to the possibility of buffer overflow based on a stack. Exploiting this vulnerability can allow a malicious actor to trigger a Denial-of-Service attack by sending a specially crafted POST...

Dell OpenManage POST Request Heap Overflow (win32)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Dell OpenManage POST Request Heap Overflow win32', 'Description' = %q This module exploits a heap overflow in the Dell OpenManage Web Server...

Exploit for OS Command Injection in Php

Fastest CVE-2024-4577 Exploitation Tool Description: PHP C...

PT-2024-22576

Name of the Vulnerable Software and Affected Versions Italtel i-MCS NFV version 12.1.0-20211215 Description An issue was discovered that allows stored Cross-site scripting XSS to occur via POST requests. This means an attacker can inject malicious scripts into the system, which can then be execut...

The vulnerability of the formQosManageDoubleAuto function in the Tenda W9 wireless access point’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formQosManageDoubleAuto function in the wireless access point software Tenda W9 is related to buffer overflow attacks based on stacks. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending specially crafted POST requests...

The vulnerability of the formSetCfm function in the Tenda W30E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetCfm function in the Tenda W30E router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending...

The vulnerability of the formwrlSSIDget function in the /goform/wifiSSIDget file of the Tenda W9 wireless access point’s microprogramming software allows a attacker to execute arbitrary code.

The vulnerability of the formwrlSSIDget function in the /goform/wifiSSIDget file of the Tenda W9 wireless access point software is related to buffer overflow based on a stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POST requests...

The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software allows a hacker to execute arbitrary code.

The vulnerability of the formModifyPppAuthWhiteMac function in the /goform/ModifyPppAuthWhiteMac file of the Tenda G3 wireless access point software is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted POST...

The vulnerability of the `formSetRemoteWebManage` function in the Tenda W20E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetRemoteWebManage function in the Tenda W20E router software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information by sending specially...

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software allows a hacker to execute arbitrary code.

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted POST...

The vulnerability of the hnap_main function in the D-LINK GO-RT-AC750 router software allows a hacker to cause a service failure.

The vulnerability of the hnapmain function in the D-LINK GO-RT-AC750 router’s software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending specially crafted POST reques...

PT-2024-27871 · Phoniebox · Phoniebox

Name of the Vulnerable Software and Affected Versions: Phoniebox versions prior to 3.0 Description: The issue is related to insecure handling of the body parameter in POST header requests sent to an instance of the Phoniebox open-source project. This allows an attacker to create a website that,...

CVE-2024-39063

Lime Survey = 6.5.12 is vulnerable to Cross Site Request Forgery CSRF. The YIICSRFTOKEN is only checked when passed in the body of POST requests, but the same check isn't performed in the equivalent GET requests...

CVE-2024-39063

Lime Survey = 6.5.12 is vulnerable to Cross Site Request Forgery CSRF. The YIICSRFTOKEN is only checked when passed in the body of POST requests, but the same check isn't performed in the equivalent GET requests...

PT-2024-28342 · Unknown · Limesurvey

Name of the Vulnerable Software and Affected Versions: Lime Survey versions 6.5.12 and earlier Description: The issue concerns a Cross Site Request Forgery CSRF problem. Specifically, the YII CSRF TOKEN is checked only when passed in the body of POST requests, but this check is not performed for...

PT-2024-27704 · Unknown · Wvp Gb28181 Pro

Name of the Vulnerable Software and Affected Versions: Wvp GB28181 Pro version 2.0 Description: An access control issue allows authenticated attackers to escalate privileges to Administrator via a crafted POST request. Recommendations: For Wvp GB28181 Pro version 2.0, consider restricting access ...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 Bulk Scanner CVE-2024-24919 Check Point Securi...

CVE-2023-43847

Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to control all the outlets as if they were the administrator via HTTP POST requests...