PT-2024-26149 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code of shouldRestrictOverlayActivities in UsbProfileGroupSettingsManager.java could lead to a possible escape from SUW, resulting in local escalation of privilege with...

The vulnerability of the setWizardCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK N350RT router’s software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setWizardCfg function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK N350RT router microprogramming system is related to the issue of data being written outside of the buffer in memory when processing the ssid parameter. Exploiting this vulnerability allows an attacker ...

PT-2024-38173 · Totolink · Totolink A7000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A7000R version 9.1.0u.6268 B20220504 Description: A critical issue was found in the setWizardCfg function of the /cgi-bin/cstecgi.cgi file. The manipulation of the ssid argument leads to buffer overflow. It is possible to launch the...

CVE-2024-7154

A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822B20200513. Affected is an unknown function of the file /wizard.html of the component Password Reset Handler. The manipulation leads to improper access controls. It is possible to launch the attack...

TOTOLINK A3700R 访问控制错误漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from an Access Control Error vulnerability that originates from the /wizard.html function of the Password Reset Handler component containing an improper access control issue. An attacker...

PT-2024-38116 · Totolink · Totolink A3700R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description: A problematic issue was found in the Password Reset Handler component, specifically in the /wizard.html file, allowing for improper access controls. The manipulation can be launched...

PT-2024-30951 · WordPress · Ignitiondeck Crowdfunding Platform

Name of the Vulnerable Software and Affected Versions: IgnitionDeck Crowdfunding Platform plugin for WordPress versions up to, and including, 1.9.8 Description: The issue is due to missing capability checks on various functions called via AJAX actions in the /classes/class-idf-wizard.php file. Th...

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software allows a hacker to execute arbitrary code.

The vulnerability of the fromWizardHandle function in the /goform/WizardHandle file of the Tenda W30E wireless access point software is related to a stack-based buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted POST...

Cannot Connect to vCenter Through the Streamed VM Setup Wizard to Create VMs

Cannot connect to vCenter throughthe Streamed VM Setup Wizard in order to create Virtual Machines VMs...

Critical Error: "Unable to contact the database server. Ensure Provisioning Services is configured correctly"

When starting Provisioning Services Console, the following error appears: “Critical Error: Unable to contact the database server. Ensure Provisioning Services is configured correctly”. Background After running the Configuration Wizard and configuring a user account for the Provisioning Services,...

Vdisk shows “No Server” for size in the PVS Console

When viewing a vdisk in the PVS Console the size will show as "No Server". The following error also appears when using XenDesktop Setup Wizard: A required PVS server in the selected site is offline or there is no server assigned to a required store...

Error: "Failed to Discover 1 of 1 Volume on the Destination Disk" Or "Failed to Discover 1 of 2 Volume on the Destination Disk"

After running the Imaging Wizard, when the PXE starts again, P2PVS displays the following error messages: "Failed to discover 1 of 1 volume on the destination disk!" Or "Failed to discover 1 of 2 volume on the destination disk!"...

Error: "vDisk is not available. Please check your network PXE boot configuration and restart Imaging Wizard" or "Red X" on Provisioning Server

After installing the Target Device Software and rebooting the following symptoms can be seen: A Red X is displayed on top of the vDisk Status Applet in the Tray Bar After running the Imaging Wizard and rebooting the following message is shown:"vDisk is not available. Please check your network PXE...

How to Image a Target Device Using the Imaging Wizard

This article describes how to image target device using the Imaging Wizard. Prerequisites Enable Windows Automount on Windows Enterprise Server operating systems. Disable Windows Autoplay. Remove any virtualization software before performing a conversion. Verify adequate free space exists on the...

Provisioning Services Database Unable to Configure

Provisioning Service database cannot be configured. When configuring the SQL server settings, the following error might appear in the Configuration Wizard log located in C:\ProgramData\Citrix\Provisioning Services\Log: 2013-07-29 14:44:37,864 1 INFO ConfigWizard - ConfigureServices: encrypt the...

“Cannot connect to the HyperVisor" when connecting to Hyper-V from the Machine Creation Wizards

When trying to connect to SCVMM to enumeratetemplates for Provisioning Services, the following error message appears: “Cannot connect to the HyperVisor at IP address of Hyper-V. Object reference not set to an instance of an object.”...

Errors: "Failed to Snapshot", "VSS_E_VOLUME_NOT_SUPPORTED"

When attempting to build an image from a Windows7 or Server 2008 Virtual Machine VM with Imaging Wizard or P2PVS, the following error message is displayed: "Failed to Snapshot" Imaging Wizard/P2PVS log shows the following error message: "VSSEVOLUMENOTSUPPORTED" and terminates with an error messag...

Insecure Deserialization

TYPO3 is vulnerable to Insecure Deserialization. The vulnerability is due to failing to properly validate incoming data in the suggest wizard, which allows an attacker to exploit insecure unserialize operations. A valid backend user account is required to exploit this vulnerability...

PVS Configuration Wizard does not display dialogues to configure DHCP or PXE services

Citrix Provisioning Configuration wizard does not display dialogues to configure DHCP servers and PXE Services. The configuration wizard begins by directly showing the Farm Configuration dialogue. If DHCP servers and PXE Services are not configured, PVS target devices which rely on those services...

VulnCheck KEV: CVE-2018-10942

modules/attributewizardpro/fileupload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file...