π¨ CVE-2022-40069
]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.
π@cveNotify
]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.
π@cveNotify
GitHub
Vuln/Tenda AC21/6 at main Β· xxy1126/Vuln
Contribute to xxy1126/Vuln development by creating an account on GitHub.
π¨ CVE-2020-25491
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page.
π@cveNotify
6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership/setProfile DisplayName field, which is mishandled when rendering the Activity Stream page.
π@cveNotify
Gist
CVE-2020-25491
CVE-2020-25491. GitHub Gist: instantly share code, notes, and snippets.
π¨ CVE-2022-40073
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.
π@cveNotify
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.
π@cveNotify
GitHub
Vuln/Tenda AC21/5 at main Β· xxy1126/Vuln
Contribute to xxy1126/Vuln development by creating an account on GitHub.
π¨ CVE-2022-40072
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.
π@cveNotify
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement.
π@cveNotify
GitHub
Vuln/Tenda AC21/7 at main Β· xxy1126/Vuln
Contribute to xxy1126/Vuln development by creating an account on GitHub.
π¨ CVE-2022-40071
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.
π@cveNotify
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.
π@cveNotify
GitHub
Vuln/Tenda AC21/2 at main Β· xxy1126/Vuln
Contribute to xxy1126/Vuln development by creating an account on GitHub.
π¨ CVE-2022-40075
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
π@cveNotify
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set.
π@cveNotify
GitHub
Vuln/Tenda AC21/1 at main Β· xxy1126/Vuln
Contribute to xxy1126/Vuln development by creating an account on GitHub.
π¨ CVE-2022-40074
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.
π@cveNotify
Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.
π@cveNotify
GitHub
Vuln/Tenda AC21/3 at main Β· xxy1126/Vuln
Contribute to xxy1126/Vuln development by creating an account on GitHub.
π¨ CVE-2022-37258
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js.
π@cveNotify
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js.
π@cveNotify
GitHub
steal/ext/npm-convert.js at c9dd1eb19ed3f97aeb93cf9dcea5d68ad5d0ced9 Β· stealjs/steal
Gets JavaScript. Contribute to stealjs/steal development by creating an account on GitHub.
π¨ CVE-2022-40076
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
π@cveNotify
Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic.
π@cveNotify
GitHub
Vuln/Tenda AC21/4 at main Β· xxy1126/Vuln
Contribute to xxy1126/Vuln development by creating an account on GitHub.
π¨ CVE-2022-40424
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0
π@cveNotify
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0
π@cveNotify
PyPI
democritus-networking
Democritus functions for working with network requests.
π1
π¨ CVE-2022-38885
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
PyPI
d8s-netstrings
Democritus functions for working with Netstrings.
π1
π¨ CVE-2022-23766
An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website.
π@cveNotify
An improper input validation vulnerability leading to arbitrary file execution was discovered in BigFileAgent. In order to cause arbitrary files to be executed, the attacker makes the victim access a web page d by them or inserts a script using XSS into a general website.
π@cveNotify
www.krcert.or.kr
KISA μΈν°λ· 보νΈλλΌ&KrCERT
π¨ CVE-2022-38881
The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
The d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
PyPI
d8s-archives
Democritus functions for working with archives.
π¨ CVE-2022-38884
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
GitHub
code execution backdoor Β· Issue #6 Β· democritus-project/d8s-grammars
We discovered a potential code execution backdoor in version 0.1.0 of the project, the backdoor is the democritus-strings package. Attackers can upload democritus-strings packages containing arbitr...
π¨ CVE-2022-38883
The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
The d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
PyPI
democritus-strings
Democritus functions for working with Python strings.
π¨ CVE-2022-40432
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.
π@cveNotify
The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0.
π@cveNotify
PyPI
d8s-strings
Democritus functions for working with Python strings.
π¨ CVE-2022-40431
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
π@cveNotify
The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0.
π@cveNotify
PyPI
democritus-networking
Democritus functions for working with network requests.
π¨ CVE-2022-38882
The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
The d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
π@cveNotify
GitHub
code execution backdoor Β· Issue #9 Β· democritus-project/d8s-json
We discovered a potential code execution backdoor in version 0.1.0 of the project, the backdoor is the democritus-strings package. Attackers can upload democritus-strings packages containing arbitr...
π¨ CVE-2022-28758
Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions.
π@cveNotify
Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions.
π@cveNotify
Zoom
Zoom Security Bulletins
View the latest Zoom Security Bulletins and make sure to update your Zoom app to the latest version in order to get the latest fixes and security improvements.
π¨ CVE-2022-3005
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
π@cveNotify
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
π@cveNotify
huntr.dev
Cross-site Scripting (XSS) - Stored in yetiforcecrm
1.15K developers have been protected by securing yetiforcecrm. Read this report, and explore others to learn how you can also protect the world by earning cash and CVEs.
π¨ CVE-2022-3004
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
π@cveNotify
Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.
π@cveNotify
huntr.dev
Cross-site Scripting (XSS) - Stored in yetiforcecrm
1.15K developers have been protected by securing yetiforcecrm. Read this report, and explore others to learn how you can also protect the world by earning cash and CVEs.