Lucene search
+L

176 matches found

CVE
CVE
added 2 hours ago5 views

CVE-2026-11835

Caliptra Core ROM (2.1.0–2.1.1) contains a TOCTOU vulnerability in UpdateResetFlow::run() that, with missing input validation, lets a compromised MCU firmware with AXI manager access inject an unvalidated AXI staging address. This bypasses secure boot by not validating against SS_EXTERNAL_STAGING...

5.6CVSS5.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 5 days ago10 views

CVE-2026-44104

The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This allows an unauthenticated remote attacker to install a modified firmware, resulting in full system compromise...

9.8CVSS6AI score0.00241EPSS
SaveExploits0References2Affected Software4
Cvelist
Cvelist
added 2026/07/21 9:24 p.m.26 views

CVE-2026-8989 Open Recovery Mode

Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical access can boot attacker-controlled code in memory and modify or extract firmware and other sensitive data...

8.6CVSS0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/10 9:4 p.m.14 views

CVE-2026-10045

Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash...

9.8CVSS5.5AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/09 7:17 p.m.12 views

CVE-2026-10045

Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash...

9.8CVSS0.00209EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/09 6:30 p.m.16 views

EUVD-2026-35453

Insufficient input validation vulnerability in NETGEAR JR6150 AC750 WiFi Router 802.11ac Dual Band Gigabit released in 2014 allows administrators connected to the local network to make unauthorized modification of router software and functionality. NETGEAR JR6150 reached End-of-Support status in...

6.8CVSS5.4AI score0.00153EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/06/09 6:9 p.m.13 views

EUVD-2026-35790

Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash...

9.8CVSS5.5AI score0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/09 3:41 p.m.10 views

CVE-2026-0410 Insufficient input validation in certain NETGEAR routers

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality...

5.7CVSS5.4AI score0.00219EPSS
SaveExploits0References20
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.16 views

Kangda Xin DR300 安全漏洞

Kangda Xin DR300 is a wireless router produced by Kangda Xin Corporation. The Kangda Xin DR300 version 2.1.2.121 has a security vulnerability. This vulnerability stems from the inclusion of hardcoded login credentials, with telnet being enabled by default. It may allow attackers to read memory,...

9.8CVSS5.3AI score0.00209EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.25 views

PT-2026-48163

Shenzhen Kangda Xin Intelligent Network Technology Company's router, model DR300, version 2.1.2.121, contains hardcoded login credentials and has telnet enabled by default on WAN and LAN interfaces. These vulnerabilities allow attackers to read and write to memory, modify firmware stored in flash...

5.5AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/02 8:16 p.m.7 views

CVE-2024-14034

Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTPS management module that allows unauthenticated remote attackers to gain administrative access by sending specially crafted HTTPS requests. Attackers can exploit improper authentication...

9.8CVSS0.00456EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/02 8:1 p.m.3 views

CVE-2024-14034

Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTPS management module that allows unauthenticated remote attackers to gain administrative access by sending specially crafted HTTPS requests. Attackers can exploit improper authentication...

9.8CVSS6AI score0.00456EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/02 8:1 p.m.2 views

CVE-2024-14034 Hirschmann HiEOS Authentication Bypass via HTTP Management Module

Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTPS management module that allows unauthenticated remote attackers to gain administrative access by sending specially crafted HTTPS requests. Attackers can exploit improper authentication...

9.8CVSS6AI score0.00456EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/02 8:1 p.m.14 views

CVE-2024-14034

CVE-2024-14034 affects Hirschmann HiEOS devices, featuring an authentication bypass in the HTTP(S) management module. The root cause is improper authentication handling that allows unauthenticated remote attackers to gain administrative access. Impact per sources includes the ability to perform u...

9.8CVSS6AI score0.00456EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.6 views

PT-2026-29892

Name of the Vulnerable Software and Affected Versions Hirschmann HiEOS devices versions prior to 01.1.00 Description Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass in the HTTPS management module. Attackers can gain administrative access by sending specially...

9.8CVSS5.9AI score0.00456EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/03/12 3:29 p.m.162 views

jooan-ja-a52-root

Jooan JA-A52 A2RU Root Exploit Full root shell on the Joo...

5.8AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/01/07 8:2 p.m.5 views

CVE-2025-64305 Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal...

7.1CVSS6.7AI score0.00144EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/18 4:35 p.m.5 views

CVE-2025-43873

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...

8.7CVSS7.1AI score0.00253EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/17 6:31 p.m.4 views

EUVD-2025-203904

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...

8.7CVSS6.6AI score0.00253EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/17 4:16 p.m.7 views

CVE-2025-43873

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...

8.7CVSS0.00253EPSS
SaveExploits0References2
Rows per page
Query Builder