697 matches found
CVE-2023-36355
TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...
CVE-2023-32270
Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...
Arbitrary delegatecalls from LlamaAccount can be used to steal assets
Lines of code Vulnerability details Impact Using delegatecall to call arbitrary contracts is highly dangerous as it can be used to steal assets. An attacker could sneak in a contract that steals all the assets owned by the LlamaAccount contract. Proof of Concept Below is a diff to the existing...
CVE-2023-34571
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet...
CVE-2023-34570
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName...
CVE-2023-34566
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...
CVE-2023-34571
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet...
CVE-2023-34569
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList...
Stack overflow
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet...
Stack overflow
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName...
Stack overflow
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...
Stack overflow
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList...
Stack overflow
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...
CVE-2023-34567
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...
CVE-2023-34568
CVE-2023-34568 affects Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn, where a stack overflow is triggered by the time parameter in the /goform/PowerSaveSet endpoint. The connected sources consistently describe a stack overflow in that endpoint, but do not provide exploit details or a confirmed offi...
CVE-2023-34571
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet...
PT-2023-24929 · Tenda · Tenda Ac10
Name of the Vulnerable Software and Affected Versions: Tenda AC10 v4 version US AC10V4.0si V16.03.10.13 cn Description: A stack overflow issue was discovered via the shareSpeed parameter at the "/goform/WifiGuestSet" API endpoint. Recommendations: For Tenda AC10 v4 version US AC10V4.0si...
CVE-2023-33538
The CVE-2023-33538 issue affects TP-Link TL-WR940N (V2/V4), TL-WR841N (V8/V10), and TL-WR740N (V1/V2) routers. Root cause: command injection in the WlanNetworkRpm.htm endpoint under /userRpm/WlanNetworkRpm, exploitably via the ssid1 parameter; authenticated access is required for exploitation (pe...
TP-Link wireless router 命令注入漏洞
The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link wireless router, which stems from a discovery via the /userRpm/WlanNetworkRpm component that contains a command injection vulnerability. Affected products and versions: TP-Link...