D-Link DIR-823X set_prohibiting - Command Injection

D-Link DIR-823X 240126 and 240802 contain a command injection caused by sending a POST request to /goform/setprohibiting, letting an authorized attacker execute arbitrary commands remotely, exploit requires attacker to be authorized. id: CVE-2025-29635 info: name: D-Link DIR-823X setprohibiting -...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

ASUS GT-AC2900 - Authentication Bypass

ASUS GT-AC2900 devices before 3.0.0.4.386.42643 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator application. This relates to handlerequest in router/httpd/httpd.c and authcheck in webhook.o. An...

Xiaomi Mi WiFi R3G Routers - Local file Inclusion

Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. id: CVE-2019-18371...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

Arlo

Arlo Extrae binarios ejecutables de volcados y actualizaciones de Arlo Ver publicación en https://www.synacktiv.com/publications/arlo-im-watching-you Analizador arlo.py se utiliza para analizar un volcado de memoria flash, descargar y analizar actualizaciones o listar modelos conocidos. Requiere...

routers-exploit

OpenSource Repo with PoC's and vulns found in routers TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC CVE-2020-9374 - TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC root@kitploit: Payload: "$ls" TP LINK TL-WR849N - Auth Bypass: Firmware and Configs update TP LINK TL-WR849N - REMOTE COMMAND...

Tenda Router AC11 - Remote Command Injection

Tenda Router AC11 is susceptible to remote command injection vulnerabilities in the web-based management interface that could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-31755 info: name: Tenda Router AC11 - Remote Comman...

Buffalo WSR-2533DHPL2 - Path Traversal

Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 are susceptible to a path traversal vulnerability that could allow unauthenticated remote attackers to bypass authentication in their web interfaces. id: CVE-2021-20090 info: name: Buffalo WSR-2533DHPL2 - Path...

CVE-2023-51073

CVE-2023-51073 - Vulnerabilidad de verificación del servidor de actualización de firmware en Buffalo LS210D versión 1.78-0.03 Christopher J. Pace y Ryan Miller El Buffalo LS210D es un servidor de almacenamiento conectado a la red NAS diseñado y comercializado para pequeñas empresas y particulares...

CVE-2026-86585

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86474

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-86585

CVE-2026-86585 affects VEO and VEO-XS Wi-Fi monitors (Fermax) in versions prior to 01.48.001 . The root cause is the lack of signature verification on firmware update packages, allowing an attacker who controls the delivery of an update to install unauthorised firmware on the device. The attack v...

CVE-2026-86474 Improper Certificate Validation in the Firmware Download vulnerability

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP

CVE-2026-8888 – Actualización de firmware de impresora sin firma vía HTTP Código del programa servidor HTTP Python + emulador de impresora root@kitploit: !/usr/bin/env python3 printerfirmwareserver.py - Simulated printer that fetches updates over HTTP import requests, hashlib, os FIRMWAREURL =...

CVE-2026-22017-Firmware-Update-via-BLE-Without-Authentication

CVE-2026-22017 – Actualización de firmware vía BLE sin autenticación Código del programa periférico Python bleak root@kitploit: blefirmwareupdate.py - Simulated BLE peripheral accepting firmware writes from bleak import BleakServer, BleakGATTCharacteristic import asyncio class FirmwareService: de...

internet-of-vulnerable-things

Internet de las Cosas Vulnerables Los resultados de mi pequeño trabajo de investigación sobre el tema de Internet de las Cosas Vulnerables. Resumen Este artículo proporciona una demostración práctica de lo inseguro que es Internet de las Cosas hackeando un dispositivo IoT típico. Se identificaron...

meltdown-spectre-bios-list

Lista de actualizaciones de BIOS/Firmware para Meltdown/Spectre Esta es una lista de todos los productos y fabricantes que han parcheado BIOS/Firmware para abordar las vulnerabilidades Meltdown y Spectre Si tienes mejor información, por favor envía pull requests. ¿Por qué hice esto? para tener un...

zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri

CVE-2026-10672 — Prueba de Concepto de Lectura Fuera de Límites en la Actualización de Firmware LwM2M de Zephyr Prueba de concepto para CVE-2026-10672 , una lectura fuera de límites en el cliente de extracción de actualización de firmware LwM2M de Zephyr RTOS...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuses to evaluate a method if arguments are missing As reported in 1, a platform firmware update increased the number of method parameters and forgot to update at least one of its callers. This caused ACPICA to crash du...