The vulnerability of the formSetWanNonLogin function (/goform/formSetWanNonLogin) in the D-Link DIR-605L router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWanNonLogin function /goform/formSetWanNonLogin in the D-Link DIR-605L router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

OpenRefine 路径遍历漏洞

OpenRefine is a Java-based open source tool from OpenRefine Open Source. The product is mainly used for loading data, analyzing data and cleaning data, etc. A path traversal vulnerability exists in OpenRefine prior to version 3.8.3, which stems from a lack of checking of the lang parameter of the...

The vulnerability of the wacWhitelistJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.

The vulnerability of the wacWhitelistJsonToBin function in the microprogramming software for TP-Link TL-WDR7660 routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a...

The vulnerability of the Console component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the Console component of the Oracle WebLogic Server application server software, part of the Oracle Fusion Middleware platform, relates to improper cleaning or release of resources due to copying of buffers without checking the size of the input data. Exploiting this...

The vulnerability of the guestRuleJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.

The vulnerability of the guestRuleJsonToBin function in TP-Link TL-WDR7660 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to trigger a service failure through a specially crafted HTTP request...

CVE-2024-49368 Unchecked logrotate settings lead to arbitrary command execution

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, causing arbitrary command execution. Version 2.0.0-beta.36 fixes this issue...

This industry profits from knowing you have cancer, explains Cody Venzke (Lock and Code S05E22)

This week on the Lock and Code podcast … On the internet, you can be shown an online ad because of your age, your address, your purchase history, your politics, your religion, and even your likelihood of having cancer. This is because of the largely unchecked “data broker” industry. Data brokers...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked function pointer in dcn401setoutputtransferfunc that results in a null pointer dereference...

The vulnerability of the formSetPortTr function (/goform/formSetPortTr) in D-Link DIR-619L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetPortTr function /goform/formSetPortTr in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a...

The vulnerability of the formSetMuti function (/goform/formSetMuti) in D-Link DIR-619L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetMuti function /goform/formSetMuti of the D-Link DIR-619L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure by sending...

Qnap QTS Unchecked Return Value (CVE-2023-50359)

An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vector...

The vulnerability of the Windows Mobile broadband access driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Mobile broadband access driver in Windows operating systems is related to the lack of control over the size of the requested buffer. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

D-Link DI_8200 安全漏洞

The D-Link DI8200 is an enterprise router from China's AUO D-Link. The D-Link DI8200 suffers from a buffer overflow vulnerability that stems from the strcpy function not checking the length of a string during execution. No details of the vulnerability are provided at this time...

CVE-2024-45746

Summary: CVE-2024-45746 affects Trusted Firmware-M up to version 2.1.0. The flaw lies in mailbox handling where user-provided in_vec/out_vec pointers are not validated, and the length of pending output arguments is updated after a PSA call regardless of the call result. This enables an attacker t...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the inclusion of a buffer copy in the RIL that does not check the input size...

Diebold Nixdorf Vynamic View Console 代码问题漏洞

Diebold Nixdorf Vynamic View Console is a Diebold Nixdorf system that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A code issue vulnerability exists in Diebold Nixdorf Vynamic View Console versions prior to 5.9.5 that stems from an...

UBUNTU-CVE-2024-6442

In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...

CVE-2024-6442 Bluetooth: ASCS Unchecked tailroom of the response buffer

In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...

CVE-2024-6442 Bluetooth: ASCS Unchecked tailroom of the response buffer

In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...

The vulnerability of the gena.cgi file in D-Link DIR-860L router microprogramming software allows a hacker to cause a service failure or execute arbitrary commands.

The vulnerability of the gena.cgi file of the D-Link DIR-860L router’s microprogramming system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary commands using a specially...