Tenda AC7 timeZone Parameter Stack Buffer Overflow Vulnerability

The Tenda AC7 is a dual-band wireless router with a strong signal and stable performance for large, multi-bedroom users. The Tenda AC7 suffers from a stack buffer overflow vulnerability that originates from the timeZone parameter of /goform/SetSysTimeCfg failing to correctly validate the length a...

CVE-2023-41558

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg...

CVE-2023-41558

Tenda AC7 V1.0 V15.03.06.44 was discovered to contain a stack overflow via parameter timeZone at url /goform/SetSysTimeCfg...

CVE-2023-40898

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...

CVE-2023-40176

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though the time zone is selected from a drop...

Design/Logic Flaw

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though the time zone is selected from a drop...

CVE-2023-40176

Summary: CVE-2023-40176 affects XWiki Platform, where storing a payload in the time zone user preference enables stored XSS when profiles are viewed. Affected component: time zone display logic in XWiki; root cause is lack of escaping in the displayer_timezone output, allowing injected scripts to...

CVE-2023-40176 SXSS in the user profile via the timezone displayer

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though the time zone is selected from a drop...

XWiki Platform 跨站脚本漏洞

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. XWiki Platform suffers from a cross-site scripting vulnerability that originates from the fact that any registered user can cause stored cross-site scripting XSS by setting...

The vulnerability of the sub_44db3c() function in Tenda AC8 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the sub44db3c function in Tenda AC8 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the timeZone parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a...

laserzone.co.uk Cross Site Scripting vulnerability OBB-3573337

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Previewing Talos at BlackHat 2023

Welcome to this weeks edition of the Threat Source newsletter. The time has come once again for all of us well, not me specifically but lots of other Talos people to descend on Las Vegas for Hacker Summer Camp. Cisco Talos will be well-represented at BlackHat and DEF CON over the course of the ne...

Active IT zone Active Super Shop CMS 跨站脚本漏洞

Active It Zone Active IT zone Active Super Shop CMS is a Super Shop CMS from Active It Zone Inc. A cross-site scripting vulnerability exists in Active It Zone Active Super Shop CMS version 2.5, which stems from the parameter name/phone/address in the component Manage Details Page that can lead to...

CVE-2023-35912

Cross-Site Request Forgery CSRF vulnerability in WP Zone Potent Donations for WooCommerce plugin = 1.1.9 versions...

CVE-2023-35912

Cross-Site Request Forgery CSRF vulnerability in WP Zone Potent Donations for WooCommerce plugin = 1.1.9 versions...

CVE-2023-35912

The CVE CVE-2023-35912 concerns a CSRF vulnerability in the WP Zone Potent Donations for WooCommerce plugin (versions

PT-2023-25377 · WordPress · Wp Zone Potent Donations For Woocommerce

Name of the Vulnerable Software and Affected Versions: WP Zone Potent Donations for WooCommerce plugin versions = 1.1.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended...

ROS-2-1199

2.1199 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

ROS-2-618

2.618 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...

ROS-2-562

2.562 Multiple vulnerabilities in ISC BIND CVE-2021-25216, CVE-2021-25215, CVE-2021-25214 1. Vulnerability Description: CVE-2021-25216 A vulnerability exists due to a boundary error in the GSS-TSIG extension. A remote attacker can send specially crafted requests to the server, trigger a buffer...