The vulnerability of the formIPMacBindModify() function (/goform/modifyIpMacBind) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formIPMacBindBindModify function /goform/modifyIpMacBind of the Tenda W15E router software is related to the issue where the operation’s output goes beyond the buffer in memory when processing parameters such as IPMacBindRuleId, IPMacBindRuleIp, IPMacBindRuleMac, and...

Tenda W15E 安全漏洞

Tenda W15E is a wireless router from Tenda China. A security vulnerability exists in the Tenda W15E version 15.11.0.14, which is caused by a buffer overflow in the IPMacBindRuleId/IPMacBindRuleIp/IPMacBindRuleMac/IPMacBindRuleMark parameter of the formIPMacBindModify method of the...

markdown-math-editor (>=1.1.0 <=1.1.3), mse-md2html (>=1.0.0 <=1.0.1) +1 more potentially affected by unknown CVE via remark-images-download (>=0.0.8 <=3.0.5)

remark-images-download NPM version =0.0.8, =1.1.0, =1.0.0, =2.1.8, =12.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-MF74-QQ7W-6J7V...

GHSA-MF74-QQ7W-6J7V Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

Impact A major blind SSRF has been found in remark-images-download, which allowed for requests to be made to neighboring servers on local IP ranges. The issue came from a loose filtering of URLs inside the module. Imagine a server running on a private network 192.168.1.0/24. A private service...

Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images

Impact A major blind SSRF has been found in remark-images-download, which allowed for requests to be made to neighboring servers on local IP ranges. The issue came from a loose filtering of URLs inside the module. Imagine a server running on a private network 192.168.1.0/24. A private service...

CVE-2020-26627

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

CVE-2020-26627

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

Sql injection

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

CVE-2024-0364

A vulnerability, which was classified as critical, was found in PHPGurukul Hospital Management System 1.0. This affects an unknown part of the file admin/query-details.php. The manipulation of the argument adminremark leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2020-26627

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

CVE-2020-26627

A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database information via a crafted payload entered into the 'Admin Remark' parameter under the 'Contact Us Queries - Unread Query' tab...

CVE-2023-46483

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function...

CVE-2023-46483

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function...

PT-2023-30046 · Timetec · Timetec Awdms

Name of the Vulnerable Software and Affected Versions: timetec AWDMS version 2.0 Description: A Cross Site Scripting issue allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function. Recommendations: For timetec AWDMS version 2.0,...

MAL-2023-467 Malicious code in gatsby-remark-images-uploadcare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfedda25b5f48c47bf9fe91a2cc6ca0cd8ed5086ecf715776b934cabd3b554ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-remark-images-uploadcare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfedda25b5f48c47bf9fe91a2cc6ca0cd8ed5086ecf715776b934cabd3b554ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-20923 · Tenda · Tenda V15V1.0

Name of the Vulnerable Software and Affected Versions: Tenda V15V1.0 version V15.11.0.141521 3190 1058 Description: A buffer overflow issue was discovered via the wifiFilterListRemark parameter in the modifyWifiFilterRules function, allowing attackers to cause a Denial of Service DoS via a crafte...

Arbitrary Code Injection

gatsby-transformer-remark is vulnerable to Arbitrary Code Injection. The vulnerability is due to the gray-matter package which is used in parsing and is vulnerable in the default configuration, allowing an attacker to inject and execute unsanitized JavaScript codes...

CVE-2023-22491

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...

UBUNTU-CVE-2023-22491

Gatsby is a free and open source framework based on React that helps developers build websites and apps. The gatsby-transformer-remark plugin prior to versions 5.25.1 and 6.3.2 passes input through to the gray-matter npm package, which is vulnerable to JavaScript injection in its default...