CVE-2024-34217

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function...

CVE-2024-27975

An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...

CVE-2024-24991

A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks...

CVE-2024-2868 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout

The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution formerly WooLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slitems parameter in the WL Special Day Offer Widget in all versions up to, and including, 2.8.3 due to...

Malicious code in wlwz-2312-7500 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc78f5fa2b7674a78b7d1747aca89c37a89e54aa26053fb61fb40610a1994dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-6907 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 951416c5b0286df301b1ebb8dfbc710b30bfccab2e25b169a3addf325b5018eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5608 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 987f5891732c1ce4f3c25901872d0b7e544ae6f63e637e6ebc620d8a1d80f3cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WAVLINK WL-WNJ575A3 Command Injection Vulnerability

WAVLINK WL-WNJ575A3 is a wireless network signal extender from China RuiYin Technology WAVLINK. The WAVLINK WL-WNJ575A3 suffers from a command injection vulnerability that originates from an application failing to properly filter construct command special characters, commands, etc. The...

WAVLINK WL-WNJ575A3 命令注入漏洞

WAVLINK WL-WNJ575A3 is a wireless network signal extender from China RuiYin Technology WAVLINK. The WAVLINK WL-WNJ575A3 suffers from a command injection vulnerability that originates from an application failing to properly filter construct command special characters, commands, etc. The...

CVE-2023-32612

Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32622

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32620

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32613

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in...

CVE-2023-32621

WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...

CVE-2023-32613

Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in...

Authentication flaw

Improper authentication vulnerability in WL-WN531AX2 firmware versions prior to 2023526 allows a network-adjacent attacker to obtain a password for the wireless network...

CVE-2023-32622

Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege...

CVE-2023-32622

The WAVLINK WL-WN531AX2 router is affected by CVE-2023-32622 (and related CVEs in the same advisory) for firmware versions prior to 2023526. The root cause is improper neutralization of special elements in the firmware, enabling an attacker with administrative privileges to execute OS commands wi...

CVE-2023-32621

Summary of CVE-2023-32621 (WAVLINK WL-WN531AX2): The vulnerability affects WL-WN531AX2 firmware versions prior to 2023526. It enables an administrator-authenticated context to upload arbitrary files and execute OS commands with root privileges, due to a file-upload vulnerability. The issue is doc...