CVE-2021-37234

Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to view sensitive information via crafted PUT request to Web API...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN lies in the insufficient verification of input data. This allows a malicious actor to execute arbitrary code or trigger a service failure.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a...

PT-2023-12304 · Unknown · Modern Honey Network

Name of the Vulnerable Software and Affected Versions: Modern Honey Network affected versions not specified Description: The issue allows remote attackers to view sensitive information via a crafted PUT request to the Web API. This is due to an Incorrect Access Control vulnerability...

CVE-2023-0639

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file getset.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site scripting. The attack may be initiated...

CVE-2023-0640

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-0640

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-0638

A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2023-0638

A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

Command injection

A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

Command injection

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-0640

TRENDnet TEW-652BRP Web Interface ping.ccp has a command injection vulnerability in an unknown function. The flaw can be exploited remotely, with public disclosure of the exploit. Affected firmware: 3.04b01. Root cause described as an unknown function in ping.ccp; no specific vulnerable files bey...

CVE-2023-0640 TRENDnet TEW-652BRP Web Interface ping.ccp command injection

A vulnerability was found in TRENDnet TEW-652BRP 3.04b01. It has been classified as critical. Affected is an unknown function of the file ping.ccp of the component Web Interface. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-0638 TRENDnet TEW-811DRU Web Interface command injection

A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. This vulnerability affects unknown code of the component Web Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

PT-2023-16417 · Trendnet · Trendnet Tew-652Brp

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-652BRP version 3.04b01 Description: A critical issue has been found in the Web Interface component of the affected software, specifically in an unknown function of the file ping.ccp. This issue leads to command injection and can ...

PT-2023-16415 · Trendnet · Trendnet Tew-811Dru

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-811DRU version 1.0.10.0 Description: A critical vulnerability has been found in the Web Interface component, allowing for command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

TRENDnet TEW-811DRU 命令注入漏洞

TRENDnet TEW-811DRU is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-811DRU web interface component, which can be exploited by attackers to submit ad hoc requests and execute arbitrary commands...

TRENDnet TEW-811DRU 命令注入漏洞

TRENDnet TEW-811DRU is a wireless router from Trendnet, Inc. A command injection vulnerability exists in the TRENDnet TEW-811DRU web interface component ping.ccp, which can be exploited by remote attackers to submit ad hoc requests and execute arbitrary commands...

PT-2023-16416 · Trendnet · Trendnet Tew-652Brp

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-652BRP version 3.04b01 Description: A vulnerability was found in the Web Management Interface of the TRENDnet TEW-652BRP, affecting the processing of the file get set.ccp. The manipulation of the nextPage argument leads to...

PT-2023-2139

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description The issue is related to a stack-based buffer overflow vulnerability in the SonicOS web interface. This vulnerability can be exploited by a remote unauthenticated attacker to cause a Denial of...

CVE-2023-20068

A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient...