PT-2024-38116 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A problematic issue was found in the Password Reset Handler component, specifically in the /wizard.html file, allowing for improper access controls. The manipulation can be launched...

PT-2024-30951 · WordPress · Ignitiondeck Crowdfunding Platform

Name of the Vulnerable Software and Affected Versions: IgnitionDeck Crowdfunding Platform plugin for WordPress versions up to, and including, 1.9.8 Description: The issue is due to missing capability checks on various functions called via AJAX actions in the /classes/class-idf-wizard.php file. Th...

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software allows a hacker to execute arbitrary code.

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted POST...

“Cannot connect to the HyperVisor" when connecting to Hyper-V from the Machine Creation Wizards

When trying to connect to SCVMM to enumeratetemplates for Provisioning Services, the following error message appears: “Cannot connect to the HyperVisor at IP address of Hyper-V. Object reference not set to an instance of an object.”...

Error: "vDisk is not available. Please check your network PXE boot configuration and restart Imaging Wizard" or "Red X" on Provisioning Server

After installing the Target Device Software and rebooting the following symptoms can be seen: A Red X is displayed on top of the vDisk Status Applet in the Tray Bar After running the Imaging Wizard and rebooting the following message is shown:"vDisk is not available. Please check your network PXE...

Vdisk shows “No Server” for size in the PVS Console

When viewing a vdisk in the PVS Console the size will show as "No Server". The following error also appears when using XenDesktop Setup Wizard: A required PVS server in the selected site is offline or there is no server assigned to a required store...

Critical Error: "Unable to contact the database server. Ensure Provisioning Services is configured correctly"

When starting Provisioning Services Console, the following error appears: “Critical Error: Unable to contact the database server. Ensure Provisioning Services is configured correctly”. Background After running the Configuration Wizard and configuring a user account for the Provisioning Services,...

How to Image a Target Device Using the Imaging Wizard

This article describes how to image target device using the Imaging Wizard. Prerequisites Enable Windows Automount on Windows Enterprise Server operating systems. Disable Windows Autoplay. Remove any virtualization software before performing a conversion. Verify adequate free space exists on the...

Error: "Failed to Discover 1 of 1 Volume on the Destination Disk" Or "Failed to Discover 1 of 2 Volume on the Destination Disk"

After running the Imaging Wizard, when the PXE starts again, P2PVS displays the following error messages: "Failed to discover 1 of 1 volume on the destination disk!" Or "Failed to discover 1 of 2 volume on the destination disk!"...

Provisioning Services Database Unable to Configure

Provisioning Service database cannot be configured. When configuring the SQL server settings, the following error might appear in the Configuration Wizard log located in C:\ProgramData\Citrix\Provisioning Services\Log: 2013-07-29 14:44:37,864 1 INFO ConfigWizard - ConfigureServices: encrypt the...

Cannot Connect to vCenter Through the Streamed VM Setup Wizard to Create VMs

Cannot connect to vCenter throughthe Streamed VM Setup Wizard in order to create Virtual Machines VMs...

Errors: "Failed to Snapshot", "VSS_E_VOLUME_NOT_SUPPORTED"

When attempting to build an image from a Windows7 or Server 2008 Virtual Machine VM with Imaging Wizard or P2PVS, the following error message is displayed: "Failed to Snapshot" Imaging Wizard/P2PVS log shows the following error message: "VSSEVOLUMENOTSUPPORTED" and terminates with an error messag...

Insecure Deserialization

TYPO3 is vulnerable to Insecure Deserialization. The vulnerability is due to failing to properly validate incoming data in the suggest wizard, which allows an attacker to exploit insecure unserialize operations. A valid backend user account is required to exploit this vulnerability...

PVS Configuration Wizard does not display dialogues to configure DHCP or PXE services

Citrix Provisioning Configuration wizard does not display dialogues to configure DHCP servers and PXE Services. The configuration wizard begins by directly showing the Farm Configuration dialogue. If DHCP servers and PXE Services are not configured, PVS target devices which rely on those services...

VulnCheck KEV: CVE-2018-10942

modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...

CVE-2024-37637

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid5g in the function setWizardCfg...

PT-2024-27138 · Trendnet · Tew-827Dru

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-827DRU versions 2.06B04 and earlier Description: The issue is a stack-based buffer overflow in the ssi binary, allowing an authenticated user to execute arbitrary code. This can be achieved by sending a POST request to "apply.cgi...

D-Link DIR-619 安全漏洞

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the parameter webpage of...

PT-2024-3753 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L versions 2.06B1 Description: The issue is related to a buffer overflow in the formWlanSetup Wizard function of the D-Link DIR-619L router's firmware. This can be exploited by a remote attacker to cause a denial of service usin...

VulnCheck KEV: CVE-2024-0799

An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin function within wizardLogin...