2918 matches found
PT-2024-39150 · Unknown · Netcat Cms
Name of the Vulnerable Software and Affected Versions: NetCat CMS versions 6.4.0.24126.2 through 6.4.0.24247 Description: A vulnerability in NetCat CMS allows an attacker to send a specially crafted HTTP request to check whether a user exists in the system. This issue could be a basis for further...
Loway QueueMetrics 环境问题漏洞
Loway QueueMetrics is a tool from Loway that allows you to automate the installation of a pre-configured QueueMetrics system on the most common Asterisk distributions. An environmental issue vulnerability exists in Loway QueueMetrics version 22.11.6 that stems from HTTP request/response smuggling...
CVE-2024-6343
A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V4.16 through V5.38, and USG20W-VPN series firmware versions from V4.16 through...
CVE-2024-5412
A buffer overflow vulnerability in the library "libclinkc" of the Zyxel VMG8825-T50K firmware version 5.50ABOM.8C0 could allow an unauthenticated attacker to cause denial of service DoS conditions by sending a crafted HTTP request to a vulnerable device...
PT-2024-6627 · Loway · Queuemetrics
Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to inconsistent interpretation of HTTP requests, which can be exploited by a remote attacker to bypass existing security restrictions and perform an HTTP...
Beckhoff TwinCAT/BSD 安全漏洞
Beckhoff TwinCAT/BSD is a new operating system from Beckhoff. A security vulnerability exists in Beckhoff TwinCAT/BSD, which stems from an MPD package that allows an authenticated, low-privileged local attacker to induce a denial of service state in the daemon via a carefully constructed HTTP...
PT-2024-8730 · Beckhoff · Twincat/Bsd
Name of the Vulnerable Software and Affected Versions: TwinCAT/BSD affected versions not specified Description: The issue is related to a buffer overflow in the MPD package of TwinCAT/BSD, which can be exploited by an authenticated, low-privileged local attacker. This can lead to a...
The vulnerability of the microprogramming software in routers like Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters allows a hacker to read arbitrary files within the system.
The vulnerability of the Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters exists due to a validation error in processing directory traversal sequences. Exploiting this vulnerability allows an attacker to read arbitrary files in the system using a specially created HTTP request...
UBUNTU-CVE-2024-7954
The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request...
CVE-2024-43032
autMan v2.9.6 allows attackers to bypass authentication via a crafted web request...
SPIP 安全漏洞
SPIP is a free software for creating Internet sites from the SPIP open source. A security vulnerability exists in SPIP that stems from vulnerability to arbitrary code execution vulnerability, where a remote, unauthenticated attacker can execute arbitrary PHP as a SPIP user by sending a crafted HT...
PT-2024-30263 · Autman · Autman
Name of the Vulnerable Software and Affected Versions: autMan version 2.9.6 Description: The issue allows attackers to bypass authentication via a crafted web request. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents whe...
autMan 安全漏洞
autMan is a powerful automation software system from autMan, Inc. A security vulnerability exists in autMan version v2.9.6, which stems from a vulnerability that allows an attacker to bypass authentication via a crafted Web request...
CVE-2024-43032
autMan v2.9.6 allows attackers to bypass authentication via a crafted web request...
CVE-2024-43032
autMan v2.9.6 allows attackers to bypass authentication via a crafted web request...
CVE-2024-43032
autMan v2.9.6 allows attackers to bypass authentication via a crafted web request...
CVE-2024-43032
The automation software system autMan version 2.9.6 is vulnerable to an authentication bypass triggered by a crafted web request . While the exact root cause is not specified, an attacker can circumvent security controls to gain unauthorized access. Remediation is currently unclear due to conflic...
The vulnerability of the WSGI-server Gunicorn, related to defects in HTTP request processing, allows attackers to circumvent existing security restrictions and execute a “HTTP request hijacking” attack.
The vulnerability of the WSGI-server Gunicorn is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and carry out an “HTTP request hijacking” attack...
Tenda FH1206 安全漏洞
Tenda FH1206 is a dual-band wireless router from Tenda, designed for large homes with fiber optics. The Tenda FH1206 suffers from a command execution vulnerability that originates from an arbitrary command execution vulnerability contained in the handler parameter of the /goform/telnet file, whic...