Tenda TX3 安全漏洞

Tenda TX3 is a wireless router from Tenda China. A security vulnerability exists in Tenda TX3 version 16.03.13.11multiTDE01, which originates from a stack buffer overflow due to incorrect operation of the parameter ssid in file /goform/fastsettingwifiset...

PT-2025-33282 · Kuwfi · Kuwfi Gc111

Name of the Vulnerable Software and Affected Versions: KuWFi GC111 versions GC111-GL-LM321 V3.0 20191211 Description: The KuWFi GC111 device is susceptible to unauthorized command execution. A crafted POST request to the /goform/goform set cmd process API endpoint, utilizing the SSID parameter,...

CVE-2025-43984: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...

CVE-2025-8958: Stack-based Buffer Overflow

A vulnerability was identified in Tenda TX3 16.03.13.11multiTDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...

CVE-2025-8765

CVE-2025-8765 affects Datacom DM955 5GT 1200 (825.8010.00) and is due to manipulation of the SSID parameter in Wireless Basic Settings, enabling reflected cross-site scripting. The vulnerability is exploitable remotely and exploitation has been disclosed publicly. Impact is limited to confidentia...

Datacom DM955 5GT 代码注入漏洞

The Datacom DM955 5GT is a router from Datacom New Zealand. A code injection vulnerability exists in the Datacom DM955 5GT version 1200 825.8010.00, which stems from improper handling of the parameter SSID and could lead to cross-site scripting attacks...

CVE-2025-8765: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Datacom DM955 5GT 1200 825.8010.00. Affected by this vulnerability is an unknown functionality of the component Wireless Basic Settings. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely...

Linux Distros Unpatched Vulnerability : CVE-2021-28660

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtwwxsetscan in drivers/staging/rtl8188eu/osdep/ioctllinux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -ssid array. NOTE: from th...

Linux Distros Unpatched Vulnerability : CVE-2020-36158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary co...

CVE-2025-34148: Improper Neutralization of Special Elements used in an OS Command

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject...

CVE-2025-50740

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...

CVE-2025-50740

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...

CVE-2025-50740

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...

CVE-2025-50740

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...

CVE-2025-50740: Improper Neutralization of Input During Web Page Generation

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...

CVE-2025-34147: Improper Neutralization of Special Elements used in an OS Command

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

UTT Progressive 750W Buffer Overflow Vulnerability (CNVD-2026-02643)

The UTT Progress 750W is an enterprise-grade dual-band wireless router from Atech Technology UTT, which is aimed at SMB network environments. The UTT Progress 750W suffers from a buffer overflow vulnerability that originates from improper handling of the parameter ssid in the file...

Belkin F9K1122 Command Injection Vulnerability

The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a command injection vulnerability that originates from the incorrect operation of the parameters wanipaddr/wannetmask/wangateway/wlssid in the file /goform/formBSSetSitesurvey. An attacker can exploit this vulnerability...

CVE-2025-21449

Transient DOS may occur while processing malformed length field in SSID IEs...

CVE-2025-5022: Weak Password Requirements

Weak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA all versions allows an attacker within the Wi-Fi communication range between the units of the product measurement unit and display unit to...