CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC 本文書では、NEXTU FLATA AX1500 ルーターファームウェアにおいて CVE-2024-29671 の脆弱性がどのように悪用されたかを説明します。 実行環境 このルーターは、Realtekチップセットを採用したMIPSアーキテクチャ（リトルエンディアン）に基づいています。 対象ルーターのファームウェアバージョンは v1.0.2 です。 このファームウェアには、2005年に最後にリリースされた組み込みWebサーバーである "boa" が含まれています。 ただし、このルーターは boa...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP 缓冲区溢出远程代码执行 概述 CWMP（TR-069）中的栈缓冲区溢出导致远程代码执行。 字段| 值 ---|--- 产品| TP-Link AX10, AX1500 受影响版本| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC" E -- F"ret2libc" F -- G"system" G -- H"RCE" 技术细节 漏洞存在于 cwmp 进程处理...

CVE-2025-60854

CVE-2025-60854 D-link AX1500 の脆弱性 最近、D-Link ルーターの脆弱性分析を実施しましたので、その調査結果を文書化したいと思います。 対象モデル: D-Link AX1500 バージョン : 1.20.01 以下 この問題の CVE 番号は現在公開されています。 脆弱な関数は以下のとおりです: root@kitploit: int fastcall sub46AE00int a1 unsigned int32 v2; // $v1 int v3; // $s1 int v4; // $t8 int v6; // $v0 int v7; // $s3 in...

Exploit for CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Buffer Overflow RCE...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

PT-2025-48741

Name of the Vulnerable Software and Affected Versions D-Link R15 AX1500 versions prior to 1.20.02 Description A flaw exists in D-Link R15 AX1500 that allows for command injection. The issue occurs due to manipulation of the model name parameter during a password change request on the web...

CVE-2025-60854

CVE-2025-60854 affects D-Link R15 (AX1500) prior to 1.20.02. The vulnerability allows command injection in httpd by manipulating the model name parameter during a password change on the web administrator page. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, no user interact...

EUVD-2025-27567

Malicious code in bioql PyPI...

EUVD-2025-27074

Malicious code in bioql PyPI...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

PT-2025-36912

Name of the Vulnerable Software and Affected Versions: TP-Link AX10 Ax1500 version 1.3.10 Build 20230130 Description: An issue in TP-Link AX10 Ax1500 allows a remote attacker to obtain sensitive information. Recommendations: At the moment, there is no information about a newer version that contai...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

CVE-2025-29089

The CVE-2025-29089 entry concerns TP-Link AX10 Ax1500 (v1.3.10 Build 20230130). Affected component is the router's information handling that enables a remote attacker to obtain sensitive information. Public sources describe an information-disclosure vulnerability caused by a flaw in explicit tran...

CVE-2025-9961

An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. The exploit can only be conducted via a Man-In-The-Middle MITM attack. This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6:...

CVE-2025-9961

An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. The exploit can only be conducted via a Man-In-The-Middle MITM attack. This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6:...