Qmssdxn

Name of the Vulnerable Software and Affected Versions UTT HiPER 1200GW versions up to 2.5.3-170306 Description A remote buffer overflow exists in the `strcpy()` function of the file '/goform/formNatStaticMap' when the `NatBind` argument is manipulated. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A flaw exists in H3C Magic B1 up to version 100R004. The issue involves a buffer overflow in the `sub 44de0` function within the `/goform/aspForm` file. Manipulation of the `param` argument can trigger this overflow, potentially allowing for remote exploitation. The exploit for this issue has been publicly released. The vendor was notified but did not respond.

A buffer overflow issue exists in the function `sub 45BB10` of the file `/goform/WifiExtraSet`. Manipulation of the `wpapsk crypto` argument can trigger this issue, allowing for remote exploitation. The exploit is publicly available.

A buffer overflow issue exists in the HTTP POST Request Handler component of Tenda AC23. The issue is due to the manipulation of the `startIp` argument within the `sscanf` function located in the /goform/SetPptpServerCfg file. This allows for remote exploitation. The exploit has been publicly disclosed.

A flaw exists in H3C Magic B3 that allows for remote buffer overflow. The issue is related to the `AddMacList` function within the `/goform/aspForm` file. Manipulation of the `param` argument can trigger the overflow. The exploit is publicly available.

Name of the Vulnerable Software and Affected Versions: UTT 1200GW versions up to 3.0.0-170831 Description: A buffer overflow weakness exists in UTT 1200GW up to version 3.0.0-170831. The issue is related to the manipulation of the `ssid` argument within the `/goform/ConfigWirelessBase` file. This manipulation can lead to a buffer overflow, and the attack can be initiated remotely. The exploit has been publicly released. The vendor was notified but did not respond. Recommendations: Versions prior to 3.0.0-170831 should be updated. As a temporary workaround, restrict access to the `/goform/ConfigWirelessBase` file to minimize the risk of exploitation. Avoid using the `ssid` parameter in the `/goform/ConfigWirelessBase` file until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: UTT 1200GW versions prior to 3.0.0-170831 Description: A security issue has been identified in UTT 1200GW. Manipulation of the `loadBalanceNameOld` argument in the `sub 4B48F8` function within the `/goform/formApLbConfig` file can lead to a buffer overflow. This issue may be exploited remotely. The exploit has been publicly disclosed. Recommendations: Versions prior to 3.0.0-170831: Update to version 3.0.0-170831 or later. As a temporary workaround, restrict access to the `/goform/formApLbConfig` file to minimize the risk of exploitation. Avoid using the `loadBalanceNameOld` parameter in the affected function `sub 4B48F8` until the issue is resolved.

A command injection issue exists in the `sub 415028` function within the `/goform/set static leases` endpoint. The flaw is caused by insufficient input validation of the `Hostname` variable. A remote attacker can exploit this by sending a specially crafted request to execute arbitrary commands on the device, potentially gaining full control.

A vulnerability exists in Telesquare TLR-2005KSH version 1.2.4. The issue is related to command injection in the `/cgi-bin/internet.cgi?Command=lanCfg` file through manipulation of the `Hostname` argument. This can be exploited remotely. The exploit has been publicly disclosed.

A weakness exists in the HTTP Handler component due to the manipulation of the `enable` argument within the `/goform/set hidessid cfg` file, leading to os command injection. This issue can be exploited remotely. The exploit has been made publicly available. The vendor was notified but did not respond.

Name of the Vulnerable Software and Affected Versions: DCN DCME-720 version 9.1.5.11 Description: A vulnerability exists in DCN DCME-720 version 9.1.5.11 related to OS command injection. The issue is located in the Web Management Backend component, specifically within the file `/usr/local/www/function/audit/newstatistics/ip block.php`. Manipulation of the `ip` argument can lead to the execution of arbitrary OS commands. The attack can be initiated remotely. The exploit has been made public. Recommendations: As a temporary workaround, consider restricting access to the `/usr/local/www/function/audit/newstatistics/ip block.php` file until a patch is available.

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.630 B20250509 Description: A security flaw exists in TOTOLINK A720R 4.1.5cu.630 B20250509. The issue affects the `setParentalRules` function within the `/cgi-bin/cstecgi.cgi` file and allows for remote buffer overflow attacks through manipulation of the `desc` argument. The exploit for this issue has been publicly released. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A security issue has been identified in LB-LINK BL-X26 version 1.2.8 related to the HTTP Handler component. Manipulation of the `mac` argument in the `/goform/set blacklist` file can lead to os command injection. The attack can be launched remotely. The exploit has been publicly disclosed.

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection vulnerability exists in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is located in an unknown function within the `/admin/email setup.php` file. Manipulation of the `Name` argument can lead to SQL injection, allowing for remote exploitation. The exploit for this issue has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A vulnerability exists in itsourcecode Online Tour and Travel Management System 1.0, affecting an unknown functionality within the `/admin/booking report.php` file. Manipulation of the `from date` argument can lead to a SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed. Recommendations: For itsourcecode Online Tour and Travel Management System version 1.0, sanitize the `from date` input to prevent SQL injection. As a temporary workaround, restrict access to the `/admin/booking report.php` file.

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A vulnerability was identified in the processing of the file `/admin/sms setting.php`. Manipulation of the `uname` argument leads to a SQL injection. The attack may be initiated remotely. The exploit has been disclosed to the public. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Online Tour and Travel Management System 1.0, specifically within the `/admin/expense report.php` file. Manipulation of the `from date` argument allows for remote exploitation. The exploit has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Tenda AC20 versions prior to 16.03.08.13 Description: A vulnerability exists in Tenda AC20 routers due to a buffer overflow in the `strcpy` function within the `/goform/saveParentControlInfo` file. Manipulation of the `Time` argument leads to the overflow, and the attack can be launched remotely. The exploit for this issue has been publicly disclosed. Recommendations: Update Tenda AC20 to version 16.03.08.13 or later.

Name of the Vulnerable Software and Affected Versions: Tenda AC20 versions up to 16.03.08.12 Description: A vulnerability exists in Tenda AC20. The manipulation of the `shareSpeed` argument in an unknown function within the `/goform/WifiGuestSet` file leads to a buffer overflow. The attack can be executed remotely, and the exploit has been publicly disclosed and may be used. Recommendations: Tenda AC20 versions prior to 16.03.08.12: Update to version 16.03.08.12 or later. As a temporary workaround, consider restricting access to the `/goform/WifiGuestSet` file to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Wavlink WL-NU516U1 M16U1 V240425 Description: A vulnerability exists due to command injection. The issue is located in the `/cgi-bin/wireless.cgi` file and impacts the `sub 4032E4` function. Manipulation of the `Guest ssid` argument can lead to command injection, and the attack is possible remotely. The exploit has been publicly disclosed. Recommendations: As a temporary workaround, consider restricting access to the `/cgi-bin/wireless.cgi` file until a patch is available. Avoid using the `Guest ssid` argument in the affected file until the issue is resolved.