23 matches found
PT-2026-110797
Name of the Vulnerable Software and Affected Versions Netcore NR268 version 1.7.121109 Description Cross site scripting occurs in the Web UI component due to improper handling of the title, note, URL, and content arguments within the eval function of the '/router/l7 call board user set.cgi'...
PT-2026-93194
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in wake up set.cgi caused by unbounded tokenization of MAC and ID input. Attackers can supply crafted MAC and ID values to the affected endpoint to overflow the stack buffer and corrupt program memory...
PT-2026-91777
A vulnerability was determined in EFM ipTIME C200E 1.094. The impacted element is an unknown function of the file iux set.cgi of the component System Setup. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and m...
PT-2026-93195
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools tcpdump start set.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code...
PT-2026-93203
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in reboot timer set.cgi caused by improper sscanf token parsing. Attackers can exploit this flaw by submitting crafted input to the affected endpoint to corrupt stack memory...
CVE-2026-7833 EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection
A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the function sub408F90 of the file /cgi/iuxset.cgi of the component ApplyRestore Endpoint. This manipulation of the argument RestoreFile causes command injection. The attack can be initiated remotely. The...
PT-2026-25946
Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system name set.cgi script that allows attackers to inject arbitrary script code by manipulating the sysName parameter. Attackers can send a crafted POST request with malicious script...
PT-2026-28893
Уязвимость сценария system name set.cgi микропрограммного обеспечения коммутаторов EDIMAX GS-5008PL связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путем отправки специально...
PT-2024-9966
Name of the Vulnerable Software and Affected Versions: Netis Wifi6 Router NX10 versions 2.0.1.3582 through 2.0.1.3643 Netis Wifi 11AC Router NC65 version 3.0.0.3749 Netis Wifi 11AC Router NC63 versions 3.0.0.3327 through 3.0.0.3503 Netis Wifi 11AC Router NC21 versions 3.0.0.3329 through 3.0.0.380...
CVE-2022-25343
An issue was discovered on Olivetti d-COLOR MF3555 2XDS000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /download/set.cgi page by manipulating the failhtmfile variable, is able to cause interruption of the...
PT-2022-17225
Name of the Vulnerable Software and Affected Versions Kyocera d-COLOR MF3555 version 2XD S000.002.271 Description The Web Application is affected by a Denial of Service issue. An unauthenticated attacker can send POST requests to the "/download/set.cgi" page by manipulating the failhtmfile...
CVE-2022-25343: Undefined Security Weakness
An issue was discovered on Olivetti d-COLOR MF3555 2XDS000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /download/set.cgi page by manipulating the failhtmfile variable, is able to cause interruption of the...
PT-2022-17226
Name of the Vulnerable Software and Affected Versions Kyocera d-COLOR MF3555 version 2XD S000.002.271 Description A cross-site scripting XSS issue was discovered. The Web Application does not properly check parameters sent in a "/dvcset/sysset/set.cgi" POST request via the arg01.Hostname field...
Kyocera d-COLOR MF3555 security vulnerabilities
Kyocera d-COLOR MF3555 is a color multifunction printer from Kyocera Japan.A denial of service vulnerability exists in the firmware version Kyocera d-COLOR MF3555 2XDS000.002.271, which stems from a failure to properly handle incoming error messages and can be exploited by an authenticated attack...
CVE-2022-25344: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered on Olivetti d-COLOR MF3555 2XDS000.002.271 devices. The Web Application doesn't properly check parameters, sent in a /dvcset/sysset/set.cgi POST request via the arg01.Hostname field, before saving them on the server. In addition, the JavaScript malicious content is the...
PT-2021-4990
Name of the Vulnerable Software and Affected Versions D-Link DWR-932C E1 firmware affected versions not specified Description The issue is related to a Missing Authentication for Critical Function vulnerability in the debug post set.cgi component of the D-Link DWR-932C E1 firmware. This...
Buffer overflow
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set"...
Belkin N750 Unauthorized Access Vulnerability
Belkin N750 is a wireless router product. The Belkin N750 version 1.10.22 has a security vulnerability in its implementation where an unauthenticated remote user can enable telnet and gain root access without a password by sending an HTTP request to set.cgi...
CVE-2018-1146
A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access...
CVE-2018-1146: Undefined Security Weakness
A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access...