293 matches found
CVE-2025-55018
An inconsistent interpretation of http requests 'http request smuggling' vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request...
CVE-2025-67186
TOTOLINK A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability in the setUrlFilterRules interface of /lib/cstemodules/firewall.so. The vulnerability occurs because the url parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow,...
CVE-2008-7229
GreenSQL Firewall greensql-fw before 0.9.2 allows remote attackers to bypass SQL injection protection via a crafted string, possibly involving an encoded space character %20...
CVE-2024-39347
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager SRM before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors...
CVE-1999-0588
A filter in a router or firewall allows unusual fragmented packets...
CVE-1999-0510
A router or firewall allows source routed packets from arbitrary hosts...
CVE-1999-0529
A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc...
CVE-2025-15387
CVE-2025-15387 concerns QNO Technology’s VPN Firewall, where an Insufficient Entropy vulnerability allows unauthenticated remote attackers to obtain a logged-in user session via brute-forcing session identifiers and then log in. Root cause: insufficient entropy in session identifiers. Documented ...
CVE-2025-13548
A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been...
CVE-2021-4470 TG8 Firewall Unauthenticated RCE via runphpcmd.php
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to...
CVE-2021-4470 TG8 Firewall Unauthenticated RCE via runphpcmd.php
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to...
TG8 Firewall 安全漏洞
TG8 Firewall is a firewall from TG8 Inc. A security vulnerability exists in TG8 Firewall that originates from the runphpcmd.php endpoint that does not validate the syscmd parameter, which could lead to remote code execution...
EUVD-2021-1396
Malware in sbrugna...
EUVD-2006-3966
Malware in sbrugna...
EUVD-2021-20635
Malware in sbrugna...
EUVD-2013-4484
Malware in sbrugna...
EUVD-2008-0274
Malware in sbrugna...
EUVD-2007-6068
Malware in sbrugna...