224 matches found
CVE-2025-57974
CVE-2025-57974 documents a Cross‑Site Scripting (Stored XSS) vulnerability in the WordPress plugin TZ Plus Gallery. Affected range: TZ Plus Gallery
Linux Distros Unpatched Vulnerability : CVE-2020-7668
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or...
MAL-2025-13821 Malicious code in @zalastax/nolb-react-tz (npm)
The package @zalastax/nolb-react-tz was found to contain malicious code...
Malicious code in @zalastax/nolb-react-tz (npm)
The package @zalastax/nolb-react-tz was found to contain malicious code...
TOTOLINK X6000R Command Injection Vulnerability
TOTOLINK X6000R is a WiFi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK with high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from not strictly filtering tz parameters. No detailed...
CVE-2025-52284
Totolink X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...
TOTOLINK X6000R 安全漏洞
TOTOLINK X6000R is a WiFi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK with high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from not strictly filtering tz parameters. No detailed...
CVE-2024-23057
TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg function...
CVE-2023-51024
TOTOlink EX1800T v9.1.0cu.2112B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi...
CVE-2023-33032
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region...
CVE-2024-43046
There may be information disclosure during memory re-allocation in TZ Secure OS...
CVE-2024-45557
Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation...
CVE-2024-45556 Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...
CVE-2024-45556 Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...
CVE-2024-45556
CVE-2024-45556 describes an improper access control issue in TZ (TrustZone) firmware affecting Qualcomm chipsets, where the access configuration permits Linux to read key registers in the TCSR. This cryptographic vulnerability exposes confidential data due to unauthorized access to critical key r...
CVE-2024-43046
CVE-2024-43046 describes an information disclosure vulnerability affecting TZ Secure OS on Qualcomm chipsets, triggered by memory re-allocation where sensitive memory content may be exposed. The CVE notes a memory re-allocation issue but the provided documents do not specify affected product vers...
CVE-2024-43046 Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS...
CVE-2024-43046 Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS...
