آخرین آسیب‌پذیری‌ها

Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a denial-of-service (DoS) via a crafted packet. Refer to the '  …

Stack-based buffer overflow in certain ASUS Router firmware allows an unauthenticated nearby attacker to execute arbitrary commands with root privileges via a crafted device name. Refer to the ' Security Update for ASUS…

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resu…

Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local System privileges, or to cause a recoverable system crash, via the service's expo…

funadmin Frontend List Endpoint index selectList sql injection

Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials

Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injection

Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection

Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification

TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow

TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow

TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow

TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow

On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls are not enforced device-side. Thus, an unauthenticated user can change administr…

On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows command injection. This allows attackers (without administrator-level access) to ex…

Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability

Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure Vulnerability

Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation Vulnerability

Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure Vulnerability

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability

Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability

Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution Vulnerability

Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability

Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability