CVE-2022-42156

D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomographypingnumber parameter at function SetNetworkTomographySettings...

CVE-2022-42159

D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator...

CVE-2022-42156

D-Link COVR 1200/1202/1203 v1.08 exposes a command-injection in SetNetworkTomographySettings via the tomography_ping_number parameter. The vulnerability originates from insufficient data sanitization at the management level, enabling a remote attacker to execute arbitrary commands. Reported impac...

CVE-2022-42159

CVE-2022-42159 affects D-Link COVR 1200/1202/1203 v1.08. The issue is a predictable seed in the device’s pseudo-random number generator, as described across multiple sources. Documented impact is limited in the provided materials; exploitation details are not listed. Some connected sources (PT-20...

CVE-2022-42161

The CVE-2022-42161 issue affects D-Link COVR 1200, 1202, and 1203 devices running version 1.08, where a command injection vulnerability exists through the /SetTriggerWPS/PIN parameter in the SetTriggerWPS() function. The vulnerability allows an attacker to inject arbitrary commands remotely via t...

CVE-2022-42161

D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at function SetTriggerWPS...

CVE-2019-9533 The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08

The root password of the Cobham EXPLORER 710 is the same for all versions of firmware up to and including v1.08. This could allow an attacker to reverse-engineer the password from available versions to gain authenticated access to the device...

Cross-site Scripting and CSRF in TorrentTrader Classic v1.08

Cross-site Scripting and CSRF in TorrentTrader Classic v1.08 Application: TorrentTrader Classic v1.08, possible other versions. Vendor URL: http://sourceforge.net/project/showfiles.php?groupid=98584&packageid=1809271. 1. Input passed to the msg property of account-inbox.php is not properly...

torrenttrader-xss.txt

Cross-site Scripting and CSRF in TorrentTrader Classic v1.08 Application: TorrentTrader Classic v1.08, possible other versions. Vendor URL: http://sourceforge.net/project/showfiles.php?groupid=98584&packageid=1809271. 1. Input passed to the msg property of account-inbox.php is not properly...