Autore: Angelo Barbosa

CVE-2024-30356 | Foxit PDF Reader AcroForm out-of-bounds

A vulnerability classified as problematic has been found in Foxit PDF Reader. Affected is an unknown function of the component AcroForm Handler. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-30356. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-30594 | Tenda FH1202 1.2.0.14(408) /goform/addWifiMacFilter deviceMac stack-based overflow

A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14(408). This vulnerability affects the function addWifiMacFilter of the file /goform/addWifiMacFilter. The manipulation of the argument deviceMac leads to stack-based buffer overflow. This vulnerability was named CVE-2024-30594. The attack can be initiated remotely. Furthermore, there is an exploit...

Per saperne di più

CVE-2024-27775 | SysAid up to 23.2.14 b17 NTLMv2 Hash server-side request forgery

A vulnerability classified as problematic has been found in SysAid up to 23.2.14 b17. This affects an unknown part of the component NTLMv2 Hash Handler. The manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2024-27775. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Per saperne di più

CVE-2024-30596 | Tenda FH1202 1.2.0.14(408) /goform/SetOnlineDevName formSetDeviceName deviceId stack-based overflow

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been rated as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument deviceId leads to stack-based buffer overflow. This vulnerability is handled as CVE-2024-30596. The attack may be launched remotely. Furthermore, there is an exploit...

Per saperne di più

CVE-2024-30593 | Tenda FH1202 1.2.0.14(408) /goform/SetOnlineDevName formSetDeviceName deviceName stack-based overflow

A vulnerability was found in Tenda FH1202 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument deviceName leads to stack-based buffer overflow. This vulnerability is known as CVE-2024-30593. The attack can be launched remotely. Furthermore, there is an exploit...

Per saperne di più