|
256291
|
9.8 |
CRITICAL
Network
|
totolink
|
ex1200l_firmware
|
A vulnerability has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023 and classified as critical. Affected by this vulnerability is the function setLanguageCfg of the file /www/cgi-bin/cstecgi.cgi…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-7909
|
2024-08-22 04:15 |
2024-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256292
|
9.8 |
CRITICAL
Network
|
ltcms
|
ltcms
|
A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component A…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-7743
|
2024-08-22 04:15 |
2024-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256293
|
9.8 |
CRITICAL
Network
|
ltcms
|
ltcms
|
A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-7742
|
2024-08-22 04:08 |
2024-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256294
|
5.3 |
MEDIUM
Network
|
ltcms
|
ltcms
|
A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The man…
|
CWE-22
Path Traversal
|
CVE-2024-7741
|
2024-08-22 04:07 |
2024-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256295
|
9.8 |
CRITICAL
Network
|
ltcms
|
ltcms
|
A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. Th…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2024-7740
|
2024-08-22 04:06 |
2024-08-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256296
|
6.5 |
MEDIUM
Network
|
oretnom23
|
computer_laboratory_management_system
|
Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete ca…
|
NVD-CWE-noinfo
|
CVE-2024-41332
|
2024-08-22 03:53 |
2024-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256297
|
9.8 |
CRITICAL
Network
|
tenda
|
fh1206_firmware
|
A vulnerability was found in Tenda FH1206 1.2.0.8. It has been declared as critical. Affected by this vulnerability is the function fromSafeClientFilter/fromSafeMacFilter/fromSafeUrlFilter. The manip…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-7615
|
2024-08-22 03:48 |
2024-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256298
|
9.8 |
CRITICAL
Network
|
tenda
|
fh1206_firmware
|
A vulnerability was found in Tenda FH1206 1.2.0.8(8155). It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument p…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-7614
|
2024-08-22 03:48 |
2024-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256299
|
9.8 |
CRITICAL
Network
|
tenda
|
fh1206_firmware
|
A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argume…
|
CWE-787
Out-of-bounds Write
|
CVE-2024-7613
|
2024-08-22 03:47 |
2024-08-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256300
|
- |
|
-
|
-
|
An issue in the downloader.php component of TOSEI online store management system v4.02, v4.03, and v4.04 allows attackers to execute a directory traversal.
|
-
|
CVE-2024-43022
|
2024-08-22 03:35 |
2024-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|