CVE-2024-57725

CVE-2024-57725: GPON Link Manipulation Vulnerability in certain Arcadyan Routers Distributed by Orange and Jazztel This repository documents an unauthenticated vulnerability discovered in LiveboxFibra Arcadyan routers distributed by Orange and Jazztel in Spain PRV3399BBLT. The issue lies in the...

Buffalo WSR Auth Bypass (CVE-2021-20090)

Exploits CVE-2021-20090 in Buffalo WSR-2533 and Arcadyan-based routers: /images/..%2f traversal bypasses authentication and exposes admin info.html. !/usr/bin/env python3 -- coding: utf-8 -- """Buffalo/Arcadyan path traversal auth bypass CVE-2021-20090.""" from kittysploit import from...

EUVD-2020-30239

Malware in sbrugna...

EUVD-2018-13130

Malware in sbrugna...

EUVD-2018-13131

Malware in sbrugna...

EUVD-2020-30240

Malware in sbrugna...

EUVD-2016-1237

Malware in sbrugna...

EUVD-2021-25141

Malware in sbrugna...

EUVD-2024-53723

Malicious code in bioql PyPI...

EUVD-2023-47893

Malicious code in bioql PyPI...

EUVD-2024-51995

Malicious code in bioql PyPI...

EUVD-2024-51994

Malicious code in bioql PyPI...

CVE-2024-53561

A remote code execution RCE vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary code via a crafted request...

CVE-2024-53563

A stored cross-site scripting XSS vulnerability in Arcadyan Meteor 2 CPE FG360 Firmware ETV2.10 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2021-38703

Wireless devices running certain Arcadyan-derived firmware such as KPN Experia WiFi 1.00.15 do not properly sanitise user input to the syslog configuration form. An authenticated remote attacker could leverage this to alter the device configuration and achieve remote code execution. This can be...

CVE-2020-9419

Multiple stored cross-site scripting XSS vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and domainname parameters present in the LAN configuration section of the administrative dashboard...

CVE-2020-9420

The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the administrative credentials to the router...

CVE-2024-57725

An issue in the Arcadyan Livebox Fibra PRV3399BBLT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint...

CVE-2024-57725

An issue in the Arcadyan Livebox Fibra PRV3399BBLT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint...

CVE-2024-57725

An issue in the Arcadyan Livebox Fibra PRV3399BBLT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint...