Stack overflow

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...

Stack overflow

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList...

CVE-2023-34571: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet...

CVE-2023-34567

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...

CVE-2023-34568

CVE-2023-34568 affects Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn, where a stack overflow is triggered by the time parameter in the /goform/PowerSaveSet endpoint. The connected sources consistently describe a stack overflow in that endpoint, but do not provide exploit details or a confirmed offi...

CVE-2023-34569: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList...

CVE-2023-34570: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName...

CVE-2023-34566: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

CVE-2023-34571

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet...

CVE-2023-34567: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...

PT-2023-24929 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 v4 version US AC10V4.0si V16.03.10.13 cn Description: A stack overflow issue was discovered via the shareSpeed parameter at the "/goform/WifiGuestSet" API endpoint. Recommendations: For Tenda AC10 v4 version US AC10V4.0si...

CVE-2023-34568: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...

TP-Link wireless router 命令注入漏洞

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link wireless router, which stems from a discovery via the /userRpm/WlanNetworkRpm component that contains a command injection vulnerability. Affected products and versions: TP-Link...

CVE-2023-33538: Improper Neutralization of Special Elements used in a Command

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm...

CVE-2023-33537: Out-of-bounds Read

TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the component /userRpm/FixMapCfgRpm...

CVE-2023-33538

The CVE-2023-33538 issue affects TP-Link TL-WR940N (V2/V4), TL-WR841N (V8/V10), and TL-WR740N (V1/V2) routers. Root cause: command injection in the WlanNetworkRpm.htm endpoint under /userRpm/WlanNetworkRpm, exploitably via the ssid1 parameter; authenticated access is required for exploitation (pe...

CVE-2023-31986

A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NSv4 allows attacker to execute arbitrary code via the setWAN function in /bin/webs without any limitations...

PT-2023-23557 · Edimax · Edimax Wireless Router N300

Name of the Vulnerable Software and Affected Versions: Edimax Wireless Router N300 Firmware BR-6428NS v4 Description: A Command Injection issue allows an attacker to execute arbitrary code via the setWAN function in /bin/webs without limitations. Recommendations: For Edimax Wireless Router N300...

PT-2023-36683

Уязвимость функции sdma v4 0 hw fini модуля drivers/gpu/drm/amd/amdgpu/sdma v4 0.c драйвера инфраструктуры прямого рендеринга DRI AMD GPU ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ ...

CVE-2020-22334

Cross Site Request Forgery CSRF vulnerability in beescms v4 allows attackers to delete the administrator account via crafted request to /admin/adminadmin.php...