EUVD-2024-41888

Malicious code in bioql PyPI...

CVE-2024-46568

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46568

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46568: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 security vulnerabilities

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sPeerId parameter of the vpn.cgi page. An attacker can cause a denia...

PT-2024-9696

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description The issue is related to a buffer overflow in the sPeerId parameter at the "vpn.cgi" API endpoint. This allows attackers to cause a Denial of Service DoS via a crafted input. The vulnerability can ...

CVE-2024-46568

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46568

The CVE-2024-46568 entry concerns DrayTek Vigor 3910 devices running v4.3.2.6, where a buffer overflow in the sPeerId parameter of vpn.cgi can be triggered to cause a Denial of Service. The NVD and related records list a CVSSv3.1 base score of 7.5 (Network, Low attack complexity, No privileges, N...

CVE-2014-9430: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 allows remote attackers to inject arbitrary web script or HTML via the COMMENT parameter in an Add action...

PT-2014-9007

Name of the Vulnerable Software and Affected Versions Smoothwall Express version 3.0 SP3 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the COMMENT parameter in an Add action in the httpd/cgi-bin/vpn.cgi/vpnconfig.dat endpoint...

SmoothWall 3.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: SmoothWall 3.1 Multiple vulnerabilities Date: 21/12/2014 Author: Yann CAM @ Synetis Vendor or Software Link: www.smoothwall.org - www.smoothwall.org/download/ Version: 3.1 Category: CSRF password reset & XSS persistent Google dork: Tested on: Smoothwall Linux distribution Smoothwal...