TP-LINK WR886N Buffer Error Vulnerability

The TP-LINK WR886N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR886N V7.03.0.14Build221115Rel.56908n.bin version, which originates from a buffer overflow vulnerability in the resetCloudPwdRegister method...

PT-2023-6356 · Connectize · Connectize Ac21000 G6

Name of the Vulnerable Software and Affected Versions: Connectize AC21000 G6 version 641.139.1.1256 Description: The issue is related to insecure credential management, allowing attackers to gain escalated privileges via the use of a weak hashing algorithm. It also involves a vulnerability in the...

CVE-2023-36857 Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access...

CVE-2023-44808

D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub4507CC function...

CVE-2023-36953

TOTOLINK CP300+ V5.2cu.7594B20200910 and before is vulnerable to command injection...

CVE-2023-36953

TOTOLINK CP300+ V5.2cu.7594B20200910 and before is vulnerable to command injection...

CVE-2023-35193

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerabilit...

CVE-2023-28381

An OS command injection vulnerability exists in the admin.cgi MVPNtrialinit functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2023-35194

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerabilit...

CVE-2023-35193

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerabilit...

CVE-2023-35193

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerabilit...

CVE-2023-35194

An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.This vulnerabilit...

Peplink Surf SOHO HW1 Operating System Command Injection Vulnerability

The Peplink Surf SOHO HW1 is a small router from Peplink. An OS command injection vulnerability exists in Peplink Surf SOHO HW1 v6.3.5, which stems from an OS command injection vulnerability in the api.cgi cmd.mvpn.x509.write function. An attacker can exploit this vulnerability to execute command...

Peplink Surf SOHO HW1 Cross-Site Scripting Vulnerability

The Peplink Surf SOHO HW1 is a compact router from Peplink. A security vulnerability exists in Peplink Surf SOHO HW1 v6.3.5, which stems from a stored cross-site scripting XSS vulnerability in the uploadbrand.cgi function. The vulnerability can be exploited by an attacker to execute arbitrary...

PT-2023-29451 · Mr-Gm3 +1 · Mr-Gm3 +1

Name of the Vulnerable Software and Affected Versions: MR-GM2 firmware versions 3.00.03 and earlier MR-GM3 -D/-K/-S/-DK/-DKS/-M/-W firmware versions 1.03.45 and earlier Description: The issue allows a network-adjacent unauthenticated attacker to intercept wireless LAN communication when the...

PT-2023-7095 · Asus · Asus Rt-Ax57

Name of the Vulnerable Software and Affected Versions: ASUS RT-AX57 version 3.0.0.4 386 52041 Description: The issue exists due to insufficient input validation in the sub 6FC74 function of the ASUS RT-AX57 Wi-Fi router's firmware. This allows a remote attacker to execute arbitrary code by sendin...

CVE-2023-44835

D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

Electrolink FM/DAB/TV Transmitter (controlloLogin.js) Credential Disclosure

Electrolink FM/DAB/TV Transmitter controlloLogin.js Credentials Disclosure Vendor: Electrolink s.r.l. Product web page: https://www.electrolink.com Affected version: 10W, 100W, 250W, Compact DAB Transmitter 500W, 1kW, 2kW Medium DAB Transmitter 2.5kW, 3kW, 4kW, 5kW High Power DAB Transmitter 100W...

CVE-2023-43865

D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function...

PT-2023-5530 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.02 Description: The issue is related to a buffer overflow in the formSetWAN Wizard7 function of the D-Link DIR-619L router's firmware. This can be exploited by a remote attacker to cause a denial of service...