CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 Proof-of-Concept PoC exploit chain targeting the TP-Link Omada ER605 DDNS client daemon cmxddnsd when the device is configured to use the Comexe DDNS service. ⚠️ Legal / Ethics : This...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

CVE-2020-26733

CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting XSS Vulnerability Description Cross Site Scripting XSS in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their...

CVE-2026-111387

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387

Nezha versions 2.2.5 before 2.3.15 are vulnerable to an information disclosure flaw in the listDDNS function. The root cause is the omission of redaction for WebhookURL and WebhookRequestBody , allowing authenticated users to view sensitive data. Specifically, administrators or Personal Access To...

CVE-2026-111387 Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-111387 Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

EUVD-2026-102568

Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookURL and WebhookRequestBody redaction. Admins or PATs with nezha:ddns:read scope can call GET /api/v1/ddns to read...

CVE-2026-108929

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

CVE-2026-108930

A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddnswanlistshow of the file ddnswanlistshow.cgi of the component DDNS Handler. The manipulation of the argument useridN/passwordN leads to information disclosure. The attack may be initiated remotely...

EUVD-2026-97861

A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddnswanlistshow of the file ddnswanlistshow.cgi of the component DDNS Handler. The manipulation of the argument useridN/passwordN leads to information disclosure. The attack may be initiated remotely...

CVE-2026-108930

A vulnerability exists in the DDNS Handler component of Netcore NR268 1.7.121109 . Specifically, the ddns_wan_list_show function within the ddns_wan_list_show.cgi file is susceptible to information disclosure through the manipulation of the user_idN/passwordN arguments. This attack can be initiat...

CVE-2026-108930 Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure

A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddnswanlistshow of the file ddnswanlistshow.cgi of the component DDNS Handler. The manipulation of the argument useridN/passwordN leads to information disclosure. The attack may be initiated remotely...

CVE-2026-108929 Netcore NR268 DDNS DDNSset.cgi execvp argument injection

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

CVE-2026-108929

A flaw in Netcore NR268 1.7.121109 affects the DDNS component, specifically within the execvp function of the /router/DDNSset.cgi file. An attacker can perform a remote argument injection by manipulating the Hostname argument. While the technical details confirm the vulnerability type and locatio...

EUVD-2026-97909

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

CVE-2026-108929: Improper Neutralization of Argument Delimiters in a Command

A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of the argument Hostname can lead to argument injection. The attack can be launched remotely...

CVE-2026-108930: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddnswanlistshow of the file ddnswanlistshow.cgi of the component DDNS Handler. The manipulation of the argument useridN/passwordN leads to information disclosure. The attack may be initiated remotely...

PT-2026-110922

Name of the Vulnerable Software and Affected Versions Netcore NR268 version 1.7.121109 Description An argument injection flaw exists in the DDNS component. A remote attacker can exploit this by manipulating the Hostname argument passed to the execvp function within the '/router/DDNSset.cgi'...