The vulnerability of the MogrifyImageList function in the MagickWand/mogrify.c component of the console-based ImageMagick graphics editor allows a hacker to trigger a service failure by exploiting a deficiency in the use of the assert() function.

The vulnerability of the MogrifyImageList function in the MagickWand/mogrify.c component of the console-based ImageMagick graphics editor is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a speciall...

Weak Password Vulnerability in RG_NBR900G at Riptide Networks Inc.

RGNBR900G is a wireless router. A weak password vulnerability exists in RGNBR900G, which can be exploited by an attacker to obtain sensitive information...

Weak password vulnerability in Lantern Fruit routers

Shenzhen Zhizhi High-tech Development Co., Ltd. was founded in September 2013, is a high-tech enterprise with independent intellectual property rights, specializing in research and development, production and sales of intelligent home. Lantern Fruit router has a weak password vulnerability,...

Weak Password Vulnerability in RG-NBR800GW of Ruijie Networks Co.

RG-NBR800GW is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. A weak password vulnerability exists in RG-NBR800GW, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Holographic AI Weak Network Comprehensive Operation and Maintenance Platform of Shenzhen Wannet Botong Investment Management Limited Partnership

Holographic AI weak electricity network integrated operation and maintenance platform is a weak electricity network integrated management platform that integrates computer network, security network, intelligent equipment network management and operation and maintenance. Shenzhen Wannet Botong...

Weak Password Vulnerability in RG-NBR700W of Ruijie Networks Co.

RG-NBR700W is an Internet Behavior Management router which is designed for office full scenarios. The RG-NBR700W has a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak password vulnerability in the holographic AI network operation and maintenance platform of Shenzhen Wannet Botong Technology Co.(CNVD-2021-50628)

Holographic AI network operation and maintenance platform is a weak power network integrated management platform that integrates computer network, security network, intelligent equipment network management and operation and maintenance. Holographic AI network operation and maintenance platform of...

CVE-2021-35973

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...

Authentication flaw

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...

CVE-2021-35973

NETGEAR WAC104 devices before 1.0.4.15 are affected by an authentication bypass vulnerability in /usr/sbin/minihttpd, allowing an unauthenticated attacker to invoke any action by adding the &currentsetting.htm substring to the HTTP query, a related issue to CVE-2020-27866. This directly allows th...

Weak password vulnerability in NNETGEAR GS748Tv5

The NETGEAR GS748Tv5 is a Gigabit Ethernet switch. The NNETGEAR GS748Tv5 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

华为智能手机安全漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in multiple Huawei SmartPhones that stems from a lack of effective permission granting and access control measures in the product. The vulnerability can be exploited by an attacker to affect the normal u...

Weak Password Vulnerability in ZTE Corporation W908-A10000

W908-A10000 is a wireless controller from ZTE Corporation. A weak password vulnerability exists in the ZTE Corporation W908-A10000, which can be exploited by an attacker to obtain sensitive information...

CVE-2021-23275

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfi...

in w7corp/easywechat

✍️ Description The method encryptsensitiveinformation in BaseClient.php uses the RSA algorithm without OAEP padding, thereby making the encryption weak. In order to use RSA securely, the OAEP padding mode Optimal Asymmetric Encryption Padding must be used. This category was derived from the Cigita...

Sick Visionary-S CX Information Disclosure Vulnerability

SICK Visionary-S CX is a 3D vision sensor from SICK, Germany. It provides direct output of color and depth values via Ethernet. The SICK Visionary-S CX has a security vulnerability in versions prior to 5.21.2.29154R, which can be exploited by an attacker with a weak password to more easily...

The vulnerability of the admin/info.php?shuyu component of the LAOBANCMS software allows a hacker to execute arbitrary code.

The vulnerability of the admin/info.php?shuyu component of the LAOBANCMS software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Weak password vulnerability in NETGEAR GS724Tv4

The GS724Tv4 is a 24-port Gigabit Smart Managed Professional Switch with 2 SFP ports. The NETGEAR GS724Tv4 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Weak password vulnerability in H5S video platform of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co., Ltd. is a software company specializing in the research, development and service of video IoT technology. A weak password vulnerability exists in the H5S video platform of ZeroVision Technology Shanghai Co. Ltd, which can be exploited by attackers to obtain...

多款TIBCO Software产品访问控制错误漏洞

Tibco Software TIBCO Spotfire Server and TIBCO Software Enterprise Runtime for R-Server Edition are both products of Tibco Software, Inc. of the U.S.A. TIBCO Spotfire Server is a suite of data analysis and mining tools based on TIBCO Spotfire that provide an integrated platform for organizations ...