62 matches found
CVE-2025-26006
The CVE-2025-26006 entry concerns Telesquare TLR-2005KSH firmware 1.1.4, with an unauthorized stack overflow vulnerability triggered when requesting the admin.cgi parameter setAutorest. The affected component is the device firmware handling admin.cgi, with impact described as high confidentiality...
CVE-2025-26008
In Telesquare TLR-2005KSH 1.1.4, an unauthorized stack overflow vulnerability exists when requesting admin.cgi parameter with setSyncTimeHost...
CVE-2025-26007
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability in the login interface when requesting systemtil.cgi...
CVE-2024-50647
The pythonfood ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization...
CVE-2024-50647
The pythonfood ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization...
CVE-2024-50647
The pythonfood ordering system V1.0 has an unauthorized vulnerability that leads to the leakage of sensitive user information. Attackers can access it through https://ip:port/api/myapp/index/user/info?id=1 And modify the ID value to obtain sensitive user information beyond authorization...
CVE-2024-50647
The CVE-2024-50647 entry concerns the python_food ordering system V1.0, where an unauthorized access flaw affects the /api/myapp/index/user/info endpoint. The root cause appears to be missing authorization checks, allowing an attacker to modify the id parameter (id=1) to enumerate or access sensi...
CVE-2024-27288 1Panel open source panel project has an unauthorized vulnerability.
1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds...
1Panel open source panel project has an unauthorized vulnerability.
Impact The steps are as follows: 1. Access https://IP:PORT/ in the browser, which prompts the user to access with a secure entry point. 2. Use Burp to intercept: When opening the browser and entering the URL allowing the first intercepted packet through Burp, the following is displayed: It is fou...
1Panel open source panel project has an unauthorized vulnerability.
The steps are as follows: 1. Access https://IP:PORT/ in the browser, which prompts the user to access with a secure entry point. 2. Use Burp to intercept: When opening the browser and entering the URL allowing the first intercepted packet through Burp, the following is displayed: It is found that...
CVE-2022-45995
There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 cn. This vulnerability can cause the web service not to restart or even execute arbitrary code. It is a different vulnerability from CVE-2022-2414...
GHSA-V25C-8349-V2Q3 Incorrect Authorization in thinkcmf
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...
Incorrect Authorization in thinkcmf
thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...
CVE-2021-40616
CVE-2021-40616 affects ThinkCMF v5.1.7. A vulnerability in the back-end user management group permissions allows an attacker to modify the administrator (id=1) password when the background user management group authority is required. This is classified as an Incorrect Authorization issue affectin...
Unauthorized Vulnerability in PowerLogic ION7650 for Power Monitoring at Schneider Electric (China) Co.
Schneider Electric China Co. Ltd. is a company whose main businesses include power, industrial automation, infrastructure, energy saving and efficiency, energy, building automation and security electronics, data centers and smart living spaces. An unauthorized vulnerability exists in the PowerLog...
Askey Fiber Optic Router Unauthorized RCE Vulnerability
Askey is the world's first professional manufacturer of international network communication equipments, the main products are ADSL, Cable, Modem, ADSL Router, Cable Router and so on. The main products are ADSL, Cable Modem, ADSL Router, Cable Router and so on. The Askey Fiber Optic Router...
Yealink Device Management Platform Unauthorized RCE Vulnerability (CNVD-2021-14827)
Founded in 2001, Yealink is a high-tech company in China, headquartered in the national software industrialization base in Xiazhou. An unauthorized RCE vulnerability in Yealink Device Management Platform can be exploited to execute arbitrary commands...
Samsung WLAN AP Unauthorized RCE Vulnerability
Samsung Electronics is a subsidiary of the Samsung Group. It is the largest manufacturer of consumer electronics and electronic components in Korea and the largest information technology company in the world. The Samsung WLAN AP Unauthorized RCE vulnerability can be exploited by remote attackers ...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An unauthorized vulnerability exists in JetBrains...
