16683 matches found
TOTOLINK X5000R Router setWiFiScheduleCfg() Arbitrary Command Execution
The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the sHour parameter. Exploiting...
D-Link DIR-823X security vulnerabilities
The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that stems from the application failing to properly filter constructed command special characters, commands, and so on. No details of the vulnerability are provided...
D-Link DAP-1620 security vulnerabilities
The D-Link DAP-1620 is a wireless repeater extender from D-Link. The D-Link DAP-1620 suffers from a stack buffer overflow vulnerability that stems from the cookie handling component checkdwscookie function failing to properly validate the length and size of input data, which can be exploited by a...
D-Link DAP-1620 security vulnerabilities
The D-Link DAP-1620 is a wireless repeater extender from D-Link. The D-Link DAP-1620 suffers from a stack buffer overflow vulnerability. The vulnerability stems from improper handling of the parameter uid and can be exploited by an attacker to trigger a denial of service or execute malicious code...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the nl80211setchannel function in the net/wireless/nl80211.c module of the Linux kernel is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CLSA-2025-1742472545 kernel: Fix of 9 CVEs
USB: serial: ioedgeport: fix use after free in debug printk CVE-2024-50267 - HID: core: zero-initialize the report buffer CVE-2024-50302 - dm cache: fix potential out-of-bounds access on the first resume CVE-2024-50278 - dm cache: fix out-of-bounds access to the dirty bitset when resizing...
CLSA-2025-1742471200 kernel: Fix of 19 CVEs
net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...
PT-2025-29013
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel’s ath11k driver related to list node corruption within the ar-arvifs list during WLAN recovery. Specifically, the ath11k core halt function only...
Tenda AC8 security vulnerabilities
Shenzhen Jixiang Tengda Technology Co., Ltd AC8 is a wireless router. Shenzhen Jixiang Tengda Technology Co., Ltd AC8 has a buffer overflow vulnerability, the vulnerability stems from the sub47D878 function's src parameter fails to correctly validate the length of the input data size, an attacker...
Tenda AC9 formAdvSetMacMtuWan Buffer Overflow Vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in the Tenda AC9 formAdvSetMacMtuWan, which originates from the mac parameter of the formAdvSetMacMtuWan function failing to correctly validate the length and size of the input data, and can be...
Tenda AC9 formWifiWpsOOB function buffer overflow vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 suffers from a buffer overflow vulnerability that stems from the formWifiWpsOOB function failing to properly validate the length size of the input data, no details of the vulnerability are provided at this time...
D-Link DIR-823G License Issue Vulnerability
The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from an authorization issue vulnerability that stems from improper authorization and can be exploited by an attacker to cause access control to sensitive content...
FUJISOFT +F FS010M: Operating System Command Injection Vulnerability
FUJISOFT +F FS010M is a wireless router from Fuji Software FUJISOFT Japan. An operating system command injection vulnerability exists in versions prior to FUJISOFT +F FS010M V2.0.01101, which stems from improper neutralization of special elements in OS commands, and could lead to the execution of...
IROAD V Series security vulnerabilities
IROAD V Series is a series of car recorders from IROAD. The IROAD V Series suffers from a security vulnerability that stems from the use of hard-coded default credentials in the car recorder, which allows an attacker to connect to the device's network within Wi-Fi range to sniff it...
wireless-regdb bug fix and enhancement update
An update is available for wireless-regdb. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Lin...
D-Link DIR-823G security vulnerabilities
The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from an authorization issue vulnerability that stems from improper authorization, no details of the vulnerability are provided at this time...
TOTOLINK EX1800T security vulnerabilities
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a buffer overflow vulnerability that stems from the setPasswordCfg function failing to properly validate the length and size of the input data, which can be exploited by an...
Tenda RX3 Buffer Overflow Vulnerability (CNVD-2025-09163)
The Tenda RX3 is a home wireless router from Tenda, a Chinese company. The Tenda RX3 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service...
CVE-2025-2213
A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability affects unknown code of the file /wlanPrimaryNetwork.asp of the component Wireless Menu. The manipulation of the argument SSID with the input leads to cross site scripting. The...
