WeGIA Cross-Site Script Vulnerabilities

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.5.1, which stems from the editarinfopessoal.php endpoint that does not adequately validate the sql parameter, which could lead to a...

Tenda O3 setAutoReboot() Code Execution

The vulnerability of the setAutoReboot function /goform/setNetworkService in the Tenda O3 wireless access point software is related to the issue of the operation going out of the buffer in memory when processing the week parameter. Exploiting this vulnerability could allow a malicious actor to...

CVE-2024-42189

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...