EUVD-2024-35311

Malicious code in bioql PyPI...

CVE-2025-50900: Improper Access Control

An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecoderequest.getRequestURI to obtain the URL-decoded request path, and then determine whether...

BIT-LIBPHP-2020-7067 OOB Read in urldecode()

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

emlog security vulnerabilities

emlog is emlog open source a set of PHP and MySQL based CMS site building system . A security vulnerability exists in emlog version 2.5.7 and 2.5.8. The vulnerability stems from searchcontroller.php not using adslashes after urldecode, which may lead to SQL injection...

BIT-PHP-MIN-2020-7067 OOB Read in urldecode()

In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support uncommon, urldecode function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes...

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-35388

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-35388

The TOTOLINK NR1800X (version v9.1.0u.6681_B20230703 ) contains a stack-based buffer overflow vulnerability. The root cause is the urldecode function's failure to properly validate the input data length for the password parameter. This flaw allows an attacker to potentially execute arbitrary code...

CVE-2024-35388: Stack-based Buffer Overflow

TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...

TOTOLINK NR1800X security vulnerabilities

TOTOLINK NR1800X is a 5G NR indoor Wi-Fi and SIP CPE from China's TOTOLINK. designed to provide fast and easy deployment of NR fixed data services in homes and offices. A buffer overflow vulnerability exists in TOTOLINK NR1800X version v9.1.0u.6681B20230703, which stems from the password paramete...

TOTOLINK LR350 urldecode function buffer overflow vulnerability

TOTOLINK LR350 is a 4G LTE router from China's TOTOLINK , which supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a buffer overflow vulnerability, which arises when the password parameter in the urldecode function fails to correctly...

CVE-2024-34308

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-34308

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

TOTOLINK LR350 security vulnerabilities

TOTOLINK LR350 is a 4G LTE router from China's TOTOLINK , which supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a buffer overflow vulnerability, which arises when the password parameter in the urldecode function fails to correctly...

CVE-2024-34308: Stack-based Buffer Overflow

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

CVE-2024-34308

The TOTOLINK LR350 (specifically version V9.3.5u.6369_B20220309 ) is vulnerable to a stack-based buffer overflow via the password parameter in the urldecode function. The flaw occurs because the function fails to correctly validate the length of the input data. An attacker can exploit this vulner...

CVE-2024-34308

TOTOLINK LR350 V9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the function urldecode...

PT-2024-25781 · Totolink · Totolink Lr350

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description: A stack overflow issue was discovered, related to the password parameter in the urldecode function. Recommendations: For TOTOLINK LR350 version 9.3.5u.6369 B20220309, avoid using the...

CVE-2023-0479

The CVE-2023-0479 entry affects the WordPress plugin Print Invoice & Delivery Notes for WooCommerce, prior to version 4.7.2. The issue is a reflected XSS vulnerability in an admin note on the WooCommerce orders page, caused by echoing a GET value after a urldecode() cleanup (post-esc_url_raw()), ...