WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.5.1, which stems from the editarinfopessoal.php endpoint that does not adequately validate the sql parameter, which could lead to a...

The vulnerability of the setAutoReboot() function (/goform/setNetworkService) in the Tenda O3 wireless access point software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the setAutoReboot function /goform/setNetworkService in the Tenda O3 wireless access point software is related to the issue of the operation going out of the buffer in memory when processing the week parameter. Exploiting this vulnerability could allow a malicious actor to...

CVE-2024-42189

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...