D-Link DAR-7000 Router Code Execution

The vulnerability of the /useratte/resmanage.php script of the D-Link DAR-7000 and DAR-8000 router microprogramming systems is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DAR-7000 Router Command Execution

The vulnerability of the D-Link DAR-7000 and DAR-8000 router microprogramming systems exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-4962

CVE-2024-4962 affects D-Link DAR-7000-40 (V31R02B1413C). A vulnerability in /useratte/resmanage.php allows unrestricted upload by manipulating the file parameter, potentially exploitable remotely. Exploit details are corroborated by multiple sources (NVD entry and PT-2024-3695). The affected prod...

CVE-2024-4965: Improper Neutralization of Special Elements used in an OS Command

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command injection. The attack may be initiated...

PT-2024-33323

Name of the Vulnerable Software and Affected Versions Byzoro Smart S200 Management Platform versions up to 20240507 Description A critical issue affects the processing of the file /useratte/userattestation.php, where the manipulation of the web img argument leads to unrestricted upload. The attac...

CVE-2024-3521: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be...

Beijing Baichuo Smart S42 Security Breach

Beijing Baichuo Smart S42 is an Internet Behavior Management appliance from Beijing Baichuo, China. A security vulnerability exists in Beijing Baichuo Smart S42 v.S42, which originates from a file upload vulnerability. The vulnerability can be exploited to execute arbitrary code via the...

CVE-2024-27733: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Byzro Network Smart s42 Management Platform v.S42 allows a local attacker to execute arbitrary code via the useratte/userattestation.php component...

CVE-2024-27733

File Upload vulnerability in Byzro Network Smart s42 Management Platform v.S42 allows a local attacker to execute arbitrary code via the useratte/userattestation.php component...

PT-2024-18420 · Byzoro · Byzoro Smart S42 Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S42 Management Platform versions up to 20240219 Description: A critical vulnerability has been found in the Byzoro Smart S42 Management Platform, affecting an unknown functionality of the file /useratte/userattestation.php. The...

CVE-2024-1253

A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126. Affected by this issue is some unknown functionality of the file /useratte/web.php of the component Import Handler. The manipulation of the argument fileupload leads to...

PT-2024-15773

Name of the Vulnerable Software and Affected Versions Beijing Baichuo Smart S150 Management Platform version V31R02B15 Description A critical issue has been found, affecting an unknown function of the file /useratte/inc/userattea.php. This leads to improper access controls, allowing remote attack...

CVE-2024-0712: Improper Access Control

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. It has been classified as critical. Affected is an unknown function of the file /useratte/inc/userattea.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit...

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform Code Issue Vulnerability

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. Byzro Networks Smart S45F Multi-Service Secure Gateway Intelligent Management Platform 20230928 and earlier versio...

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform Code Issue Vulnerability

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. Byzro Networks Smart S45F Multi-Service Secure Gateway Intelligent Management Platform 20230928 and prior versions...

PT-2023-32132

Name of the Vulnerable Software and Affected Versions Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230928 Description A critical issue...

CVE-2023-5493: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulation of the argument fileupload leads t...

CVE-2023-5490: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This vulnerability affects unknown code of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted uploa...

CVE-2023-5150: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the...