CVE Vulnerability Catalog

A vulnerability was identified in Open5GS up to 2.7.6 in the NGAP PathSwitchRequest Message Handler component in file src/amf/ngap-handler.c. The manipulation leads to improper authentication. The attack can be initiated remotely and the exploit is publicly available.

Buffer overflow in the formQoS function of Edimax BR-6478AC 1.23 allows a remote attacker to execute code by manipulating the selSSID argument.

In Edimax BR-6478AC version 1.23, a stack-based buffer overflow vulnerability was found in the formPPPoESetup function of the /goform/formPPPoESetup file. The attack involves manipulating the pppUserName argument and can be performed remotely. The exploit is publicly available.

A stack-based buffer overflow was determined in Shibby Tomato up to version 1.28 in the rip_zebra_read_ipv4 function of the /usr/sbin/ripd file. The attack can be launched remotely, and the exploit is publicly available. The project is superseded by FreshTomato and no longer supported.

A stack-based buffer overflow was found in TRENDnet TEW-432BRP version 3.10B20 in the formSetDomainFilter function of the /goform/formSetDomainFilter file. The attack can be launched remotely, and the exploit is publicly available. The vendor states the product has been EOL for 15 years.

A stack-based buffer overflow vulnerability was found in the TRENDnet TEW-432BRP router version 3.10B20 in the formSetProtocolFilter function of the /goform/formSetProtocolFilter file. Remote attack is possible by manipulating the protocol_name argument. The vendor states the product has been EOL for 15 years and will not be fixed.

In TRENDnet TEW-432BRP version 3.10B20, a stack-based buffer overflow vulnerability was found in the formSetUrlFilter function of the /goform/formSetUrlFilter file. The attack involves manipulating the keyword_list/keyword arguments and can be performed remotely. The vendor confirmed the product is EOL for 15 years and will not release a patch.

WinMTR 0.91 has a denial of service vulnerability due to a buffer overflow. An attacker can crash the application by sending a crafted input file with 238 bytes of repeated characters.

Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the aid and cid parameters. Attackers can send GET requests to index.php with crafted SQL payloads to extract database information including table and column names.

SQL injection vulnerability in Gate Pass Management System 2.1. Unauthenticated attackers can bypass authentication by injecting SQL code into the login and password parameters in a POST request to login-exec.php.

MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract sensitive database information including usernames.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to watch.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the genre parameter. Attackers can send GET requests to genre.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

An SQL injection vulnerability exists in AiOPMSD Final 1.0.0 in year.php. An unauthenticated attacker can send a GET request with a crafted year parameter to execute arbitrary SQL queries and extract sensitive database information such as usernames, database names, and versions.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the quality parameter. Attackers can send GET requests to quality.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability in the country parameter. Unauthenticated attackers can send crafted GET requests to country.php to execute arbitrary SQL queries and extract sensitive data such as usernames, database names, and versions.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability in the director parameter. Unauthenticated attackers can send crafted GET requests to director.php to execute arbitrary SQL queries and extract sensitive data such as usernames, database names, and versions.

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability in the actor parameter. Unauthenticated attackers can send crafted GET requests to actor.php to execute arbitrary SQL queries and extract sensitive data such as usernames, database names, and versions.

An SQL injection vulnerability exists in AiOPMSD Final 1.0.0 in search.php. An unauthenticated attacker can send a GET request with a crafted 'q' parameter to execute arbitrary SQL queries and extract sensitive database information such as usernames, database names, and versions.

MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability in the 'id' parameter. Unauthenticated attackers can send crafted GET requests to email.php to execute arbitrary SQL queries and extract sensitive data such as table and column names.