WPS Server Side Request Forgery vulnerability

Summary The OGC Web Processing Service WPS specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request Forgery. Details This vulnerability requires: The WPS extension to be installed The WPS security setting...

GHSA-5PR3-M5HM-9956 WPS Server Side Request Forgery vulnerability

Summary The OGC Web Processing Service WPS specification is designed to process information from any server using GET and POST requests. This presents the opportunity for Server Side Request Forgery. Details This vulnerability requires: The WPS extension to be installed The WPS security setting...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

Command injection

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

CVE-2023-45466

The CVE-2023-45466 affects Netis N3Mv2-V1.0.1.865 (router). A command injection vulnerability exists in the WPS Settings via the pin_host parameter, enabling an attacker to inject commands. CVSS 3.1 base score 9.8 (Network attack vector, low complexity, no privileges required, no user interaction...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

CVE-2023-45466

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pinhost parameter in the WPS Settings...

PT-2023-29557 · Netis · Netis N3Mv2

Name of the Vulnerable Software and Affected Versions: Netis N3Mv2 version 1.0.1.865 Description: A command injection issue was discovered via the pin host parameter in the WPS Settings, allowing for potential exploitation. Recommendations: For Netis N3Mv2 version 1.0.1.865, consider restricting...

NETIS SYSTEMS N3 Command Injection Vulnerability

NETIS SYSTEMS N3 is a router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS N3 Mv2-V1.0.1.865 version, which stems from a command injection vulnerability via the pinhost parameter in the WPS settings...

Command Execution Vulnerability in WPS Windows Edition of Zhuhai Kingsoft Office Software Co.

WPS is an office software. A command execution vulnerability exists in WPS Windows Edition of Zhuhai Kingsoft Office Software Limited, which can be exploited by attackers to execute arbitrary code...

Malicious code in wpi-xmldom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ca72dd827e914309265980a13573c7017021ad948c7fb748b36707a9aa85e47 The OpenSSF Package Analysis project identified 'wpi-xmldom' @ 2.2.2 npm as malicious. It is considered malicious because: - The package...

Remote Code Execution Vulnerability in WPS Office of Zhuhai Kingsoft Office Software Co.

WPS Office is an office software suite from Zhuhai Kingsoft Office Software Co. A remote code execution vulnerability exists in WPS Office of Zhuhai Kingsoft Office Software Co. Ltd, which can be exploited by attackers to gain server privileges...

CVE-2023-40041

TOTOLINK T10v2 5.9c.5061B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cstemodules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code...

CVE-2023-40041

TOTOLINK T10v2 5.9c.5061B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cstemodules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code...

CVE-2023-21205

In startWpsPinDisplayInternal of staiface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2023-17992 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the startWpsPbcInternal function of sta iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution...

CVE-2023-32548

OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a specially crafted data, an arbitrary OS command may be executed on the system where the product is...

CVE-2023-32548

OS command injection vulnerability exists in WPS Office version 10.8.0.6186. If a remote attacker who can conduct a man-in-the-middle attack connects the product to a malicious server and sends a specially crafted data, an arbitrary OS command may be executed on the system where the product is...