CVE-2022-26334

This CVE (CVE-2022-26334) is a buffer copy without checking size in Siemens SCALANCE X-300/XR324 family devices, triggered by unauthenticated HTTP GET requests that fail to validate the XNo parameter, leading to a device crash. Affected products include numerous SCALANCE X switch models (X302-7, ...

Local File Inclusion

larvitbase-www is vulnerable to local file inclusion. The package uses an exposed API endpoint that accepts an unvalidated GET parameter to a require function call. This could potentially allow a remote attacker to execute any .js files within the web server. Successful exploitation causes the...