PT-2023-30072 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered via the function formMeshUploadConfig. This issue may allow for exploitation, potentially leading to unintended consequences. However, no...

PT-2023-30071 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formIpv6Setup. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

PT-2023-30078 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formWlanRedirect. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

PT-2023-30082 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formMultiAP. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web version, which stems from a buffer overflow issue in the formMapDelDevice method...

CVE-2023-46555

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw...

PT-2023-30091 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: The issue is related to a stack overflow that occurs via the formDosCfg function. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, as a temporary...

PT-2023-30086 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formFilter. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

PT-2023-30084 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formMapDel. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, consider disabling the formMapDel...

PT-2023-30083 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formParentControl. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

Malicious code in npm-research-enum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32f39024ba535c374e98c41355c2663f4ae5a92ff25df3c0f8cc60837ec06d56 The OpenSSF Package Analysis project identified 'npm-research-enum' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

WordPress plugin ActivityPub cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

PT-2023-27661 · Thecosy · Thecosy Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS version 1.0.0 Description: The issue allows a remote attacker to gain privileges. This is achieved via the Id and key parameters in the getCosSetting function. Recommendations: For Thecosy IceCMS version 1.0.0, consider...

CVE-2022-22298

A improper neutralization of special elements used in an os command 'os command injection' in Fortinet FortiIsolator version 1.0.0, FortiIsolator version 1.1.0, FortiIsolator version 1.2.0 through 1.2.2, FortiIsolator version 2.0.0 through 2.0.1, FortiIsolator version 2.1.0 through 2.1.2,...

PT-2023-6022 · Fortinet · Fortiguest

Name of the Vulnerable Software and Affected Versions: Fortinet FortiGuest version 1.0.0 Description: The issue is related to an insertion of sensitive information into log files, which allows a local attacker to access plaintext passwords in the RADIUS logs. This is due to insufficient protectio...

Malicious code in packyourbag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba8658fbbd0da5e5ed46c77303773845cdee5464fda24ccedc98a4a1c9e29c6a The OpenSSF Package Analysis project identified 'packyourbag' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in himanhutest57gggg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfa2aec23b268d14e5afc0af068c41f2cce81dedebf5c6cf6051a17ebe5f45fa The OpenSSF Package Analysis project identified 'himanhutest57gggg' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Sql injection

An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extract arbritary information from the...

Jorani SQL Injection Vulnerability

Jorani is a leave management system developed by Benjamin BALET, an individual developer in France. It is designed to provide small organizations with a simple workflow for leave and overtime requests. A SQL injection vulnerability exists in Jorani version 1.0.0 that originates from allowing an...

PT-2023-20804 · Jorani · Jorani

Name of the Vulnerable Software and Affected Versions: Jorani version 1.0.0 Description: An SQL Injection issue has been found, allowing an authenticated remote user with low privileges to send queries with malicious SQL code on the "/leaves/validate" path and the id parameter. This enables the...