222 matches found
Codezips Pet Shop Management System SQL注入漏洞
Codezips Pet Shop Management System is a Codezips open source pet store management system. Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the t1 parameter in the /deletebird.php file resulting in SQL injection...
PT-2024-16272 · Unknown · Codezips Pet Shop Management System
Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue has been found in the system, affecting the /deleteanimal.php file, where the manipulation of the t1 argument leads to SQL injection. The attack can be initiated...
PT-2024-16277 · Unknown · Codezips Pet Shop Management System
Name of the Vulnerable Software and Affected Versions: Codezips Pet Shop Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /deletebird.php. The manipulation of the t1 argument leads to SQL injection. This issue can be...
SourceCodeHero Clothes Recommendation System SQL注入漏洞
SourceCodeHero Clothes Recommendation System is a SourceCodeHero open source clothing recommendation system. SourceCodeHero Clothes Recommendation System version 1.0 suffers from a SQL injection vulnerability, which originates from the parameter t1 in the file /admin/index.php of the component...
Dahua ASI7213X-T1 Authentication Bypass By Capture-Replay (CVE-2022-30563)
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
AZL-44217 CVE-2023-39329 affecting package openjpeg2 2.3.1-12
A flaw was found in OpenJPEG. A resource exhaustion can occur in the opjt1decodecblks function in tcd.c through a crafted image file, causing a denial of service...
UBUNTU-CVE-2023-39329
A flaw was found in OpenJPEG. A resource exhaustion can occur in the opjt1decodecblks function in tcd.c through a crafted image file, causing a denial of service...
OpenJPEG Resource Management Error Vulnerability
OpenJPEG is an open source C-based JPEG2000 codec. A resource management error vulnerability exists in OpenJPEG, which stems from a resource exhaustion condition in the opjt1decodecblks function in tcd.c. The vulnerability is caused by a resource exhaustion condition...
Comtrend router WLD71-T1 Operating System Command Injection Vulnerability
Comtrend router WLD71-T1 is a router from China Comtrend Telecom Comtrend. An operating system command injection vulnerability exists in the Comtrend Router WLD71-T1 v2.0.201820 version, which stems from susceptibility to command injection and could allow an authenticated user to execute commands...
CVE-2024-0816
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50ABVY.4C0 could allow an authenticated local attacker to cause denial of service DoS conditions by executing the CLI command with crafted strings on an affected device...
CVE-2024-0816
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50ABVY.4C0 could allow an authenticated local attacker to cause denial of service DoS conditions by executing the CLI command with crafted strings on an affected device...
CVE-2024-0816
The CVE describes a buffer overflow in the DX3300-T1 firmware V5.50(ABVY.4)C0. An authenticated local attacker can cause DoS by executing crafted strings via the device CLI. The vulnerability is limited to the CLI interface on the affected firmware; no remote vector is indicated. No exploitation ...
CVE-2024-0816
The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50ABVY.4C0 could allow an authenticated local attacker to cause denial of service DoS conditions by executing the CLI command with crafted strings on an affected device...
PT-2024-15836 · Dx3300-T1 · Dx3300-T1
Name of the Vulnerable Software and Affected Versions: DX3300-T1 firmware version V5.50ABVY.4C0 Description: The issue allows an authenticated local attacker to cause denial of service DoS conditions by executing the CLI command with crafted strings on an affected device. Recommendations: For...
Zyxel DX3300-T1 安全漏洞
The Zyxel DX3300-T1 is a WiFi 6 Mesh device from China's Hopkins Technology Zyxel. A security vulnerability exists in the Zyxel DX3300-T1 V5.50ABVY.4C00 firmware version that originates from a vulnerability that could allow an authenticated, local attacker to cause a denial of service by executin...
Movistar 4G router OS Command Injection Vulnerability
Movistar 4G router is a series of routers from Movistar Spain. The Movistar 4G router ESWLD71-T1v2.0.201820 firmware version has an operating system command injection vulnerability that originates from allowing authenticated users to execute commands within the router by sending a POST request to...
PT-2024-20303 · Telefonica · Movistar 4G Router
Name of the Vulnerable Software and Affected Versions: Movistar 4G router version ES WLD71-T1 v2.0.201820 Description: The issue is a Cross-Site Request Forgery vulnerability that allows an attacker to force an end user to execute unwanted actions in a web application where they are currently...
PT-2025-2386 · Ibm · Ibm Planning Analytics
Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics versions 2.0 through 2.1 Description: The issue concerns a malicious file upload weakness due to the lack of file type validation in the File Manager T1 process. This allows attackers to upload malicious executable file...