648 matches found
CVE-2024-42757
Command injection vulnerability in Asus RT-N15U 3.0.0.4.3763754 allows a remote attacker to execute arbitrary code via the netstat function page...
CVE-2024-42757
Command injection vulnerability in Asus RT-N15U 3.0.0.4.3763754 allows a remote attacker to execute arbitrary code via the netstat function page...
PT-2024-30127
Name of the Vulnerable Software and Affected Versions Asus RT-N15U version 3.0.0.4.376 3754 Description A command injection issue allows a remote attacker to execute arbitrary code via the netstat function page. Recommendations For Asus RT-N15U version 3.0.0.4.376 3754, as a temporary workaround,...
CVE-2024-42757: Improper Neutralization of Special Elements used in an OS Command
Command injection vulnerability in Asus RT-N15U 3.0.0.4.3763754 allows a remote attacker to execute arbitrary code via the netstat function page...
The vulnerability of ASUS RT-N12+ B1 router’s microprogramming software, related to the lack of data cleaning at the control level, allows attackers to execute arbitrary commands.
The vulnerability of ASUS RT-N12+ B1 router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through CSV injection using the client name parameter...
ASUS RT-AX88U Buffer Overflow Vulnerability
The ASUS RT-AX88U is a wireless router from Asus China. A buffer overflow vulnerability exists in ASUS RT-AX88U version v3.0.0.4.38824198, which originates from an application boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary cod...
CVE-2024-33278
Buffer Overflow vulnerability in ASUS router RT-AX88U with firmware versions v3.0.0.4.38824198 allows a remote attacker to execute arbitrary code via the connectionstatemachine due to improper length validation for the cookie field...
CVE-2023-33548
Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...
ASUS RT-AC51U 安全漏洞
ASUS RT-AC51U is a wireless router from Asus China. A security vulnerability exists in ASUS RT-AC51U version 3.0.0.4.380.8591 and prior versions. An attacker can exploit the vulnerability to run arbitrary code via the WPA pre-shared key field...
PT-2024-12434
Name of the Vulnerable Software and Affected Versions ASUS RT-AC51U versions up to and including 3.0.0.4.380.8591 Description A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the WPA Pre-Shared Key field. This enables attackers to execute malicious scripts, potentially...
CVE-2023-33548: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...
CVE-2023-33548
The ASUS RT-AC51U wireless router is vulnerable to a Cross-Site Scripting (XSS) vulnerability in firmware versions up to and including 3.0.0.4.380.8591 . An attacker can exploit the WPA Pre-Shared Key field to execute arbitrary code . A published proof-of-concept was sighted on March 26, 2025. No...
CVE-2023-35720
ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
CVE-2023-35720
ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
CVE-2023-35720
CVE-2023-35720 affects ASUS RT-AX92U via the mod_webdav.so module. The flaw allows network-adjacent attackers to disclose sensitive information through SQL injection in requests, with no authentication required and root context obtainable. The vulnerability stems from inadequate validation of a u...
CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability
ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability
ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
CVE-2023-35720: Improper Neutralization of Special Elements used in an SQL Command
ASUS RT-AX92U lighttpd modwebdav.so SQL Injection Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected ASUS RT-AX92U routers. Authentication is not required to exploit this vulnerability. The specific flaw exists...
ASUS RT-AX92U 安全漏洞
ASUS RT-AX92U is a wireless router from Asus China. A security vulnerability exists in the ASUS RT-AX92U that stems from the presence of a SQL injection information disclosure vulnerability that allows network-adjacent attackers to disclose sensitive information on the affected router...