Alc9700

**Name of the Vulnerable Software and Affected Versions** H3C Magic B0 versions prior to 100R002 **Description** A buffer overflow occurs in the `Edit BasicSSID 5G` function within the '/goform/aspForm' file. This issue is triggered by manipulating the `param` argument and can be initiated remotely. **Recommendations** Update to a version later than 100R002. As a temporary workaround, restrict access to the '/goform/aspForm' endpoint or disable the `Edit BasicSSID 5G` function.

**Name of the Vulnerable Software and Affected Versions** Tenda F453 versions prior to 1.0.0.4 **Description** A command injection issue exists in the Telnet Service component. A remote attacker can manipulate the `TendaTelnet()` function within the '/goform/telnet' endpoint to execute arbitrary commands, potentially gaining full control of the device. This issue is currently under active exploitation. **Recommendations** Update to a version newer than 1.0.0.3. As a temporary workaround, restrict access to the '/goform/telnet' endpoint or disable the Telnet Service to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 810G versions through 1.7.7-171114 **Description** A flaw exists in UTT HiPER 810G that could allow for a buffer overflow. The issue is related to the `strcpy` function within the `/goform/ConfigExceptMSN` file. Manipulating the `remark` argument can trigger the overflow. This can be exploited remotely. The exploit is publicly available. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, consider restricting access to the `/goform/ConfigExceptMSN` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** UTT HiPER 810G versions up to 1.7.7-171114 **Description** A buffer overflow issue exists in the Management Interface component of UTT HiPER 810G. The `strcpy` function within the `/goform/formFireWall` file is affected when handling the `GroupName` argument. This allows for remote exploitation. The exploit is publicly available. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, consider restricting access to the `/goform/formFireWall` file.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 512W versions through 1.7.7-171114 **Description** A flaw exists in UTT 进取 512W up to version 1.7.7-171114. Manipulation of the `hidcontact` argument in the '/goform/formWebAuthGlobalConfig' path can lead to memory corruption. Remote exploitation is possible, and an exploit has been publicly released. The vendor was notified but did not respond. **Recommendations** Versions prior to 1.7.7-171114 should be updated. As a temporary workaround, restrict access to the '/goform/formWebAuthGlobalConfig' path. Avoid manipulating the `hidcontact` argument.

**Name of the Vulnerable Software and Affected Versions** UTT 进取 750W versions through 3.2.2-191225 **Description** A security issue exists in UTT 进取 750W. The `system` function within the file '/goform/formPdbUpConfig' is susceptible to command injection through manipulation of the `policyNames` argument. This allows for remote attacks. The exploit has been publicly disclosed. The vendor was notified but did not respond. **Recommendations** Versions prior to 3.2.2-191225 should not be used. Consider restricting access to the '/goform/formPdbUpConfig' file. Avoid using the `policyNames` parameter in the affected file until a resolution is available.

**Name of the Vulnerable Software and Affected Versions** Tenda AC8 version 16.03.34.06 **Description** A flaw exists in the `formSetServerConfig` function located in the `/goform/SetServerConfig` file. This can lead to a buffer overflow, potentially allowing for remote attacks. A public exploit is available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Tenda TX3 version 16.03.13.11 multi TDE01 Description: A vulnerability exists in Tenda TX3 version 16.03.13.11 multi TDE01. The issue is related to a stack-based buffer overflow within an unknown functionality of the file `/goform/fast setting wifi set`. Manipulation of the `ssid` argument can trigger the overflow, and the attack can be launched remotely. The exploit for this issue has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System version 1.0 Description: A vulnerability was found in the SourceCodester Gym Management System, which has been classified as problematic. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Recommendations: As a temporary workaround, consider implementing additional security measures to prevent cross-site request forgery attacks until a patch is available. Restrict access to sensitive functions and modules to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Tenda RX3 version 16.03.13.11 multi TDE01 **Description** A critical issue affects the function `save staticroute data` of the file "/goform/SetStaticRouteCfg". The manipulation of the argument `list` leads to a stack-based buffer overflow. The attack may be initiated remotely. **Recommendations** For Tenda RX3 version 16.03.13.11 multi TDE01, as a temporary workaround, consider disabling the `save staticroute data` function until a patch is available. Restrict access to the "/goform/SetStaticRouteCfg" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Apartment Visitor Management System version 1.0 **Description** A critical vulnerability was found in the SourceCodester Apartment Visitor Management System, affecting some unknown functionality of the file /view-report.php. The manipulation of the `fromdate` and `todate` arguments leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For version 1.0, consider disabling the functionality related to the /view-report.php file until a patch is available. Restrict access to the `fromdate` and `todate` arguments in the affected API endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NUUO Camera versions prior to 20250203 **Description** A critical issue exists in NUUO Camera that allows for remote command injection. The issue affects the `print file` function within the `/handle config.php` file. Manipulation of the `log` argument can lead to arbitrary command execution. The vulnerability is remotely exploitable, and the exploit has been publicly disclosed. The vendor was informed of the issue but did not respond. **Recommendations** Versions prior to 20250203 should be updated. As a temporary workaround, consider restricting access to the `/handle config.php` file. Avoid using the `log` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Codezips Gym Management System version 1.0 **Description** A critical issue has been found in the system, affecting some unknown functionality of the file "/dashboard/admin/submit plan new.php". The manipulation of the `planid` argument leads to sql injection. The attack may be launched remotely. **Recommendations** Codezips Gym Management System version 1.0: Update the "/dashboard/admin/submit plan new.php" file to prevent sql injection by properly sanitizing the `planid` argument.

**Name of the Vulnerable Software and Affected Versions** Tenda A18 versions up to 15.13.07.09 **Description** This issue affects the function SetCmdlineRun of the file /goform/SetCmdlineRun of the component HTTP POST Request Handler. The manipulation of the argument `wpapsk crypto5g` leads to stack-based buffer overflow. The attack may be initiated remotely. **Recommendations** Tenda A18 versions up to 15.13.07.09: Update the firmware to a version later than 15.13.07.09 to resolve the issue. As a temporary workaround, consider restricting access to the /goform/SetCmdlineRun endpoint until a patch is available. Avoid using the parameter `wpapsk crypto5g` in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Codezips Blood Bank Management System version 1.0 **Description** A critical issue affects some unknown functionality of the file /successadmin.php. The manipulation of the argument `psw` leads to SQL injection. The attack may be launched remotely. **Recommendations** For Codezips Blood Bank Management System version 1.0, consider disabling the `psw` argument in the /successadmin.php file as a temporary workaround until a patch is available. Restrict access to the /successadmin.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PHPGurukul Complaint Management System version 1.0 **Description** A critical vulnerability has been found in the PHPGurukul Complaint Management System. This issue affects an unknown part of the file /admin/category.php. The manipulation of the `state` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For PHPGurukul Complaint Management System version 1.0, consider disabling access to the /admin/category.php file until a patch is available. As a temporary workaround, restrict the manipulation of the `state` argument to minimize the risk of SQL injection exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Codezips Hospital Management System version 1.0 **Description** A critical issue was found in the system, affecting some unknown functionality of the file /invo.php. The manipulation of the `dname` argument leads to SQL injection. The attack can be launched remotely. Other parameters might also be affected. **Recommendations** For Codezips Hospital Management System version 1.0, consider disabling access to the /invo.php file or restricting the manipulation of the `dname` argument until a fix is available. As a temporary workaround, avoid using the `dname` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** 1000 Projects Daily College Class Work Report Book version 1.0 **Description** A critical issue has been found, affecting an unknown part of the file /login.php. The manipulation of the `user` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For version 1.0, update to the latest version and implement input sanitization to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the /login.php file until the issue is resolved. Avoid using the `user` argument in the /login.php file until the issue is fixed.