188 matches found
CVE-2026-2527
A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
CVE-2026-2527
CVE-2026-2527 affects Wavlink WL-WN579A3 devices (firmware up to 20210219). The vulnerability resides in /cgi-bin/login.cgi, where manipulating the key argument enables remote command execution (command injection). Public exploit details exist, and exploitation can be remote without user interact...
WAVLINK WL-WN579A3 has a command injection vulnerability
WAVLINK WL-WN579A3 is a high-performance dual-band wireless network card developed by WAVLINK Corporation. The WAVLINK WL-WN579A3 versions 20210219 and earlier has a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter “key” in the file...
CVE-2026-2527: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be...
CVE-2022-35526
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 login.cgi has no filtering on parameter key, which leads to command injection in page /login.shtml...
Riello UPS NetMan 208 has a SQL injection vulnerability
Riello UPS NetMan 208 is a network management card from Riello UPS, Italy. A SQL injection vulnerability exists in Riello UPS NetMan 208 versions prior to 1.12, which originates from the presence of SQL injection in cgi-bin/login.cgi, which may result in table deletion...
CVE-2025-68914: Improper Neutralization of Special Elements used in an SQL Command
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection. For example, an attacker can delete the LOGINFAILEDTABLE table...
EUVD-2025-36534
Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi...
CVE-2025-61128
Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi...
CVE-2025-61128
Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi...
PT-2025-44186
Name of the Vulnerable Software and Affected Versions WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730 Description A stack-based buffer overflow exists in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware version M30HG3 V240730, and potentially other WAVLINK models. This allows attackers to...
CVE-2025-61128
Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi...
CVE-2025-61128: Stack-based Buffer Overflow
Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi...
CVE-2025-61128
A stack-based buffer overflow vulnerability exists in the WAVLINK QUANTUM D3G and WAVLINK WL-WN530HG3 routers, specifically affecting firmware version M30HG3_V240730 and potentially other Wavlink models. The flaw is triggered when the login.cgi endpoint processes a POST request containing a craft...
VulnCheck KEV: CVE-2014-1635
Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103WW1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter...
EUVD-2017-18473
Malware in sbrugna...
CVE-2025-11338 D-Link DI-7100G C1 jhttpd login.cgi sub_4C0990 buffer overflow
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploi...
CVE-2025-11338 D-Link DI-7100G C1 jhttpd login.cgi sub_4C0990 buffer overflow
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploi...
PT-2025-40906
Name of the Vulnerable Software and Affected Versions D-Link DI-7100G C1 versions up to 20250928 Description A buffer overflow issue exists in the jhttpd component of D-Link DI-7100G C1. The issue is located in the sub 4C0990 function of the /webchat/login.cgi file. Manipulation of the openid...