107 matches found
CVE-2014-0160
CVE-2014-0160 Enlaces https://github.com/DisK0nn3cT/MaltegoHeartbleed https://github.com/a0726h77/heartbleed-test https://github.com/musalbas/heartbleed-masstest https://github.com/decal/ssltest-stls https://github.com/isgroup-srl/openmagic https://github.com/offensive-python/HeartLeak Nmap nmap...
CVE-2025-56565
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...
EUVD-2025-210925
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...
CVE-2025-56565
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...
CVE-2025-56565: Cleartext Storage of Sensitive Information
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...
CVE-2025-56565
The DD-WRT firmware deployed on TP-Link TL-WR740N v1 through v4 hardware contains a vulnerability where sensitive authentication credentials are stored in cleartext within non-volatile memory. Exposed information includes SSH private keys , dynamic DNS passwords, email notification credentials, a...
The vulnerability of the UPnP microprogramming software for routers, DD-WRT, allows a hacker to trigger a service failure.
The vulnerability of the UPnP microprogramming software for routers with DD-WRT is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests through the UDP port...
CVE-2021-27137
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...
EUVD-2021-34854
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...
CVE-2021-27137: Stack-based Buffer Overflow
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...
CVE-2021-27137
CVE-2021-27137 affects DD-WRT’s UPnP service (ssdp.c) before change set 45724, where an unsafe strcpy copies user-supplied data into a fixed 128-byte buffer, enabling a remote unauthenticated attacker to overflow the buffer via M-SEARCH requests on UDP/1900. By default UPnP is off and bound to in...
PT-2026-46055
Name of the Vulnerable Software and Affected Versions DD-WRT versions prior to 45724 Description An unsafe strcpy function in the UPnP handling functionality within router/upnp/src/ssdp.c allows an unauthenticated remote attacker to overflow an internal fixed buffer. This issue is triggered via a...
VulnCheck KEV: CVE-2021-27137
DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability...
DD-WRT security vulnerabilities
DD-WRT is an open-source alternative firmware based on Linux, developed by DD-WRT. It is suitable for various WLAN routers and embedded systems. Version DD-WRT 45723 contains a security vulnerability, which stems from a buffer overflow in the UPNP network discovery service. This vulnerability cou...
PT-2026-3807
DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target devi...
CVE-2021-47854: Buffer Copy without Checking Size of Input
DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target devi...
EUVD-2012-6152
Malware in sbrugna...
EUVD-2009-2756
Malware in sbrugna...