📄 cleverange_auth 0.1.10 Denial of Service

A denial of service vulnerability exists in cleverangeauth version 0.1.10. The vulnerability is caused by the automatic generation of verification records and immediate email delivery whenever a new User object is created. Security Advisory: CVE-2026-51788 Denial of Service DoS Vulnerability in...

CVE-2020-37228 iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retrieve valid CAPTCHA codes via the login endpoint and use them to perform brute-force attacks agains...

TP-LINK WR-886N Router Code Execution

The vulnerability of the /cloudconfig/routerpost/getregverifycode function in TP-LINK’s WR-886N router software arises due to a buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely by sending a specially crafted request...

TP-Link WR886N security vulnerabilities

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/checkregverifycode, which can be exploited by a remote attacker to submit a special request that can crash the application or can be used to execute...

TP-Link WR886N security vulnerabilities

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/checkresetpwdverifycode, which can be exploited by a remote attacker to submit a special request that can crash the application or can execute arbitrar...

TP-Link WR886N security vulnerabilities

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/getregverifycode, which can be exploited by a remote attacker to submit a special request that can crash an application or can be used to execute...

PT-2022-2224

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description The issue is caused by a buffer overflow in the /cloud config/router post/check reset pwd verify code interface of the TP-LINK WR-886N router's firmware. This can allow a remote attacker to...

PT-2022-2227

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description The issue is caused by a buffer overflow on the stack in the /cloud config/router post/get reg verify code feature of the TP-LINK WR-886N router's firmware. This allows a remote attacker to...

PT-2022-2223

Name of the Vulnerable Software and Affected Versions TP-LINK WR-886N version 20190826 2.3.8 Description A Buffer Overflow issue exists in the /cloud config/router post/check reg verify code function, which could allow a remote malicious user to execute arbitrary code via a crafted post request...

ThinkPHP 默认配置导致验证码暴力破解

简要描述： ThinkPHP 默认配置导致验证码暴力破解 详细说明： 最近用Thinkphp时发现，验证码类默认的check函数在检查完验证码是否正确后，并未重置session，导致可被暴力破解。 写这样的代码，再看看Verify类的check函数， public function check$code, $id = '' $key = $this-authcode$this-seKey.$id; // 验证码不能为空 $secode = session$key; ifempty$code || empty$secode return false; // session 过期...