CVE-2024-7339 TVT DVR TD-2104TS-CL queryDevInfo information disclosure

A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5LMM and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be...

CVE-2024-7339

CVE-2024-7339 affects TVT DVR TD-2104TS-CL, TD-2108TS-HP, Provision-ISR SH-4050A5-5L(MM) and AVISION AV108T, with information disclosure arising from an insecure /queryDevInfo handler due to insufficient access control. A remote attacker can trigger the leak; multiple sources note that an exploit...

CVE-2024-7338 TOTOLINK EX1200L cstecgi.cgi setParentalRules buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument week/sTime/eTime leads to buffer overflow. It is possible to initiate the attack...

CVE-2024-7337 TOTOLINK EX1200L cstecgi.cgi loginauth buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200L 9.3.5u.6146B20201023. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument httphost leads to buffer overflow. The attack may be launched remotely. T...

CVE-2024-7337

CVE-2024-7337 affects TOTOLINK EX1200L 9.3.5u.6146_B20201023. The vulnerability is in the loginauth function of /cgi-bin/cstecgi.cgi, where manipulation of the http_host parameter leads to a buffer overflow. The issue can be triggered remotely; public exploit information has been reported. Affect...

CVE-2024-7336 TOTOLINK EX200 cstecgi.cgi loginauth buffer overflow

A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646B20201211. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument httphost leads to buffer overflow. The attack can be launched remotely. The exploit...

CVE-2024-7336 TOTOLINK EX200 cstecgi.cgi loginauth buffer overflow

A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646B20201211. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument httphost leads to buffer overflow. The attack can be launched remotely. The exploit...

CVE-2024-7336

CVE-2024-7336 affects TOTOLINK EX200 (4.0.3c.7646_B20201211). The vulnerability is in the loginauth function of /cgi-bin/cstecgi.cgi, where processing the http_host parameter can overflow a buffer. This enables a remote attacker to potentially compromise confidentiality, integrity, and availabili...

CVE-2024-7334

A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146B20201023. It has been rated as critical. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2024-7334

A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146B20201023. It has been rated as critical. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2024-7335

The CVE-2024-7335 issue affects TOTOLINK EX200 (firmware 4.0.3c.7646_B20201211) in the getSaveConfig function at /cgi-bin/cstecgi.cgi?action=save&setting. The vulnerability arises from a buffer overflow triggered by the http_host parameter, enabling remote code execution if exploited. Public expl...

CVE-2024-7334 TOTOLINK EX1200L cstecgi.cgi UploadCustomModule buffer overflow

A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146B20201023. It has been rated as critical. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2024-7334

TOTOLINK EX1200L 9.3.5u.6146_B20201023 has a buffer overflow in the UploadCustomModule function of /cgi-bin/cstecgi.cgi. Affects the device firmware; the issue can be triggered remotely and the exploit has been disclosed publicly. The CVE entry is corroborated across multiple sources (NVD entry a...

CVE-2024-7332

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747B20191224. It has been classified as critical. This affects an unknown part of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack...

CVE-2024-7333 TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow

A vulnerability was found in TOTOLINK N350RT 9.3.5u.6139B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument week/sTime/eTime leads to buffer overflow. The attack can be initiated...

CVE-2024-7333 TOTOLINK N350RT cstecgi.cgi setParentalRules buffer overflow

A vulnerability was found in TOTOLINK N350RT 9.3.5u.6139B20201216. It has been declared as critical. This vulnerability affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument week/sTime/eTime leads to buffer overflow. The attack can be initiated...

CVE-2024-7333

TOTOLINK N350RT, firmware 9.3.5u.6139_B20201216, is affected by CVE-2024-7333 in the setParentalRules function at /cgi-bin/cstecgi.cgi. The issue is a buffer overflow triggered by manipulating week, sTime, or eTime, allowing remote exploitation. Multiple connected sources (including PT-2024-5478 ...

CVE-2024-7330

A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the function curlexec of the file /App/Core/Extend/Function/ydLib.php. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The...

CVE-2024-7331

CVE-2024-7331 affects TOTOLINK A3300R (version 17.0.0cu.557_B20221024). The vulnerability resides in UploadCustomModule (function in /cgi-bin/cstecgi.cgi); manipulating the File argument triggers a buffer overflow. Remote exploitation is possible and an exploit has been disclosed publicly. Connec...

CVE-2024-7331 TOTOLINK A3300R cstecgi.cgi UploadCustomModule buffer overflow

A vulnerability was found in TOTOLINK A3300R 17.0.0cu.557B20221024 and classified as critical. Affected by this issue is the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument File leads to buffer overflow. The attack may be launched remotely. The explo...