CVE-2023-24099

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects...

CVE-2023-24099

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects...

PT-2023-15105 · WordPress · User Verification Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: User Verification WordPress plugin versions prior to 1.0.94 Description: The issue allows for an authentication bypass, requiring only the knowledge of a user's username to exploit. Since usernames are often publicly available, an attacker ma...

CVE-2022-4693: Insufficiently Protected Credentials

The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user’s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given ...

CVE-2023-24099: Out-of-bounds Write

TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the username parameter at /formWizardPassword. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects...

Cross site scripting

Cross Site Scripting XSS vulnerability in Kalkun 0.8.0 via username input in file Usermodel.php...

CVE-2022-48126

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function...

Command injection

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function...

CVE-2023-23015: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Kalkun 0.8.0 via username input in file Usermodel.php...

CVE-2023-23015

Cross Site Scripting XSS vulnerability in Kalkun 0.8.0 via username input in file Usermodel.php...

CVE-2023-23015

Cross Site Scripting XSS vulnerability in Kalkun 0.8.0 via username input in file Usermodel.php...

PT-2023-18821

Name of the Vulnerable Software and Affected Versions Kalkun version 0.8.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It occurs via the username input in the file User model.php. Recommendations For Kalkun version 0.8.0, update the User model.php file to properl...

CVE-2023-23015

Cross Site Scripting XSS vulnerability in Kalkun 0.8.0 via username input in file Usermodel.php...

CVE-2022-48126: Improper Neutralization of Special Elements used in an OS Command

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function...

CVE-2022-48126

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function...

CVE-2014-125083

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named...

CVE-2014-125083: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Anant Labs google-enterprise-connector-dctm up to 3.2.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument username/domain leads to sql injection. The patch is named...

CVE-2015-10068

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is...

xcash 1.5 Insecure Settings

==================================================================================================================================== | Title : xcash V1.5 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 103.064-bit | |...

CVE-2015-10068: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is...