TOTOLINK X18 命令注入漏洞

TOTOLINK X18 is a mesh router system from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X18 version V9.1.0cu.2024B20220329, which originates from a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

CVE-2023-29054

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

CVE-2023-24544

Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the product settings may be altered. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier,...

D-Link DIR882 缓冲区错误漏洞

The D-Link DIR882 is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR882 DIR882A1FW110B02 version that stems from the presence of a stack overflow, which can be exploited by an attacker to cause a denial of service DoS or execute arbitrary...

Tenda AC10 缓冲区错误漏洞

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC10 USAC10V4.0siV16.03.10.13cn version, which stems from a stack overflow issue discovered via the sub45DC58 function. An attacker could exploit this vulnerability to cause a system denial of service o...

Supermicro X11 安全漏洞

The Supermicro X11 is a server motherboard from Supermicro. A security vulnerability exists in the Supermicro X11SSL-CF HW Rev 1.01, BMC firmware version 1.63, which stems from the BMC having an internal IC bus that causes the voltage to vary outside of the CPU's specified operating range, thus...

D-Link DIR882 缓冲区错误漏洞

The D-Link DIR882 is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR882 DIR882A1FW110B02 version that stems from the presence of a stack overflow, which can be exploited by an attacker to cause a denial of service DoS or execute arbitrary...

PT-2023-2517 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR878 version DIR 878 FW120B05 Description: A stack overflow vulnerability in the sub 475FB0 function has been discovered, allowing attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload. This issue...

D-Link DIR882 缓冲区错误漏洞

The D-Link DIR882 is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR882 DIR882A1FW110B02 version that stems from the presence of a stack overflow, which can be exploited by an attacker to cause a denial of service DoS or execute arbitrary...

GeoVision Camera GV-ADR2701 - Authentication Bypass Vulnerability

Exploit Title: GeoVision Camera GV-ADR2701 - Authentication Bypass Device name: GV-ADR2701 Exploit Author: Chan Nyein Wai Vendor Homepage: https://www.geovision.com.tw/ Software Link: https://www.geovision.com.tw/download/product/ Firmware Version: V1.0020171215 Tested on: windows 10 Exploitation...

Xiaomi router 访问控制错误漏洞

Xiaomi router is a series of wireless routers from Chinese company Xiaomi. A security vulnerability exists in firmware version 2020 of the Xiaomi router, which stems from the lack of access control policies on some API interfaces, which could lead to WIFI password leakage and allow attackers to...

WAGO 750 Series Improper Resource Shutdown or Release (CVE-2018-8836)

Wago 750 Series PLCs with firmware version 10 and prior include a remote attack may take advantage of an improper implementation of the 3 way handshake during a TCP connection affecting the communications with commission and service tools. Specially crafted packets may also be sent to Port...

CVE-2023-23149

DEK-1705 =Firmware:34.23.1 device was discovered to have a command execution vulnerability...

CVE-2022-28492

TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login...

CVE-2023-26805

Tenda W20E v15.11.0.6 USW20EV4.0brv15.11.0.610681546841CNTDC is vulnerable to Buffer Overflow via function formIPMacBindModify...

JVN#62420378: TP-Link T2600G-28SQ uses vulnerable SSH host keys

TP-Link layer-2 switch T2600G-28SQ uses vulnerable SSH host keys CWE-1391. Impact The credential information for an affected device may be obtained when the administrator is tricked to login to a device which spoofs the affected device. Solution Update the Firmware Update the firmware to the late...

CVE-2023-23150

SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution...

D-Link DIR820LA1 操作系统命令注入漏洞

The D-Link DIR820LA1 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR820LA1FW105B03 version, which stems from the presence of an operating system command injection vulnerability that can be exploited by an attacker to elevate privileges to root via a...

PT-2023-18860 · Unknown · Sa-Wr915Nd

Name of the Vulnerable Software and Affected Versions: SA-WR915ND router firmware version 17.35.1 Description: The issue allows for code execution. Recommendations: For SA-WR915ND router firmware version 17.35.1, at the moment, there is no information about a newer version that contains a fix for...

DrayTek Vigor2960 命令注入漏洞

The DrayTek Vigor2960 is a dual WAN broadband router/VPN gateway from China-based DrayTek. A command injection vulnerability exists in the DrayTek Vigor2960 v1.5.1.4, which stems from the presence of a command injection vulnerability via the mainfunction.cgi component...