TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50670)

TOTOLINK N600R is a wireless router from Gion Electronics TOTOLINK, Taiwan, China.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the url parameter in the FUN00415bf0 function. An attacker could exploit this...

CVE-2022-29399

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN00415bf0...

CVE-2022-29399

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN00415bf0...

Stack overflow

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN00415bf0...

CVE-2022-29399

TOTOLINK N600R is affected by CVE-2022-29399 due to a stack/buffer overflow in the function FUN_00415bf0, triggered by the url parameter. Affected product: N600R firmware 4.3.0cu.7647_B20210106. Root cause: lack of length validation for the url parameter. Exploit details and patches are not provi...

CVE-2022-29399

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN00415bf0...

PT-2022-19579

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description A stack overflow issue was discovered via the url parameter in the function FUN 00415bf0. Recommendations For TOTOLINK N600R version 4.3.0cu.7647 B20210106, as a temporary workaround,...

CVE-2022-29399: Out-of-bounds Write

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the url parameter in the function FUN00415bf0...

Reflected Xss using url based payload

Description Hi there i found that url parameter is not verified by server so an attacker can use javascript schema to run xss on user's browser Proof of Concept 1. Visit this page http://localhost/invoices/EditPageOption?code=ListProducto-new&url=javascript:prompt2 2. Click on back button PoC:-...

PT-2022-18804

Name of the Vulnerable Software and Affected Versions Jspxcms version 10.2.0 Description The issue allows attackers to execute a Server-Side Request Forgery SSRF via the API endpoint "/cmscp/ext/collect/fetch url.do" with the url parameter. This can potentially lead to unauthorized access to...

CVE-2022-1282

The Photo Gallery by 10Web WordPress plugin before 1.6.3 does not properly sanitize the $GET'imageurl' variable, which is reflected back to the users when executing the editimagebwg AJAX action...

Arbitrary file deletion

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...

CVE-2022-27983

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...

PT-2022-18733

Name of the Vulnerable Software and Affected Versions RG-NBR-E Enterprise Gateway RG-NBR2100G-E affected versions not specified Description The issue is related to an arbitrary file read vulnerability. This vulnerability can be exploited via the url parameter in the check.php file. Recommendation...

CVE-2022-27983: Undefined Security Weakness

RG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read vulnerability via the url parameter in check.php...

PT-2022-13335

Name of the Vulnerable Software and Affected Versions uDraw WordPress plugin versions prior to 3.3.3 Description The issue arises from the lack of validation of the url parameter in the udraw convert url to base64 AJAX action, which is accessible to both unauthenticated and authenticated users...

Tenda AC9 Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a buffer overflow vulnerability, which can be exploited to execute arbitrary code via the url parameter...

CVE-2022-23970

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...

CVE-2022-23971

ASUS RT-AX56U’s updatePLC/PORT file has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another PLC/PORT file with the same file name, which results in service...

Path traversal

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...