ELECOM WRC-2533GS2V-B、WRC-2533GS2-B和WRC-2533GS2-W 安全漏洞

ELECOM WRC-2533GS2V-B and others are a wireless router from ELECOM Japan. A security vulnerability exists in v1.68 and earlier versions of the ELECOM WRC-2533GS2V-B, WRC-2533GS2-B, and WRC-2533GS2-W. The vulnerability stems from the possibility that a logged-in user with administrative privileges...

JVN#06672778: Multiple vulnerabilities in ELECOM wireless LAN routers

Multiple wireless LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Unrestricted Upload of File with Dangerous Type CWE-434 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base Score 6.8 CVE-2024-34021 OS Command Injection CWE-78...

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer file of the Tenda W9 wireless access point’s microprogramming system allows a attacker to execute arbitrary code.

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer file of the Tenda W9 wireless access point’s microprogramming system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially...

CVE-2024-39291

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfxv943init cpcomputemicrocode and rlcmicrocode The function gfxv943initmicrocode in gfxv943.c was generating about potential truncation of output when using the snprintf function. The issue was due...

Malicious code in down_load_ebook_dark_victory_by_a_w_hartoin_94ad1 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-38611

In the Linux kernel, the following vulnerability has been resolved: media: i2c: et8ek8: Don't strip remove function when driver is builtin Using exit for the remove function results in the remove callback being discarded with CONFIGVIDEOET8EK8=y. When such a device gets unbound e.g. using sysfs o...

CVE-2024-36965

A vulnerability was found in the Linux kernel's MediaTek remote processor driver. The Inter-Processor Interrupt IPI buffers were not properly validated to ensure they fit within the L2 Tightly Coupled Memory L2TCM. This issue could lead to buffer overflows or memory corruption. Mitigation...

CVE-2024-36965

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM L2TCM size that is defined in the...

CVE-2024-36965

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM L2TCM size that is defined in the...

CVE-2024-36965 remoteproc: mediatek: Make sure IPI buffer fits in L2TCM

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM L2TCM size that is defined in the...

CVE-2024-36965 remoteproc: mediatek: Make sure IPI buffer fits in L2TCM

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM L2TCM size that is defined in the...

CVE-2024-36965

CVE-2024-36965 affects the Linux kernel remoteproc mediatek by adding a guard to ensure the IPI buffer fits in L2TCM. The IPI buffer address is read from firmware loaded to the System Companion Processor, and the SRAM/L2TCM size defined in the devicetree may be insufficient, especially for multi-...

CVE-2024-36965: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: remoteproc: mediatek: Make sure IPI buffer fits in L2TCM The IPI buffer location is read from the firmware that we load to the System Companion Processor, and it's not granted that both the SRAM L2TCM size that is defined in the...

Exploit for OS Command Injection in Proscend M330-W_Firmware

CVE-2022-36779 exploit code for Unauthenticated OS...

CVE-2023-52748 f2fs: avoid format-overflow warning

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this: fs/f2fs/compress.c: In function ‘f2fsinitpagearraycache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes...

CVE-2023-52748 f2fs: avoid format-overflow warning

In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this: fs/f2fs/compress.c: In function ‘f2fsinitpagearraycache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes...

CVE-2023-44403

D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2024-31616

An issue discovered in RG-RSR10-01G-TW-S and RG-RSR10-01G-TWA-S routers with firmware version RSR10-01G-T-SRSR3.01B9P2, Release07150910 allows attackers to execute arbitrary code via the commonquickconfig.lua file...

CVE-2024-31616: Improper Filtering of Special Elements

An issue discovered in RG-RSR10-01G-TW-S and RG-RSR10-01G-TWA-S routers with firmware version RSR10-01G-T-SRSR3.01B9P2, Release07150910 allows attackers to execute arbitrary code via the commonquickconfig.lua file...

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...