PT-2025-43649

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow issue. This occurs through the curTime parameter within the formSetMACFilter function. The issue could allow for...

PT-2025-43646

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax router firmware version FW116WWb01 contains a buffer overflow. This issue is related to the curTime parameter within the formSetPortTr function. Recommendations At the...

PT-2025-43647

Name of the Vulnerable Software and Affected Versions D-Link DIR600L version Ax FW116WWb01 Description The D-Link DIR600L router firmware version Ax FW116WWb01 contains a buffer overflow. This occurs through the curTime parameter within the formSetLog function. Recommendations At the moment, ther...

CVE-2025-60566

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter...

CVE-2025-60569

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute...

CVE-2025-60557

The D-Link DIR600L wireless router (firmware version FW116WWb01 ) is vulnerable to a buffer overflow in the formSetEasy_Wizard function. The root cause is the failure to properly validate the length of input data when processing the curTime parameter, specifically during buffer copying. A remote ...

CVE-2025-60549

The D-Link DIR600L wireless router (specifically firmware FW116WWb01 ) is vulnerable to a buffer overflow in the formAutoDetecWAN_wizard4 function. The root cause is the improper validation of the input data length during the processing of the curTime parameter, specifically involving the copying...

CVE-2025-60570

The D-Link DIR600L wireless router (Ax FW116WWb01) is vulnerable to a buffer overflow in the formLogDnsquery function. The root cause is a failure to properly validate the length of input data when processing the curTime parameter, specifically by copying buffer data without size checks. A malici...

CVE-2025-56438

An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card...

CVE-2025-60938

Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system. The vulnerability stems from insufficient input validation of user-controlled parameters including filename, port, baudrate,...

Light & Wonder Deck Mate 安全漏洞

Light & Wonder Deck Mate is an automated licensing device from Light & Wonder, UK. A security vulnerability exists in Light & Wonder Deck Mate that stems from a firmware update mechanism that does not validate cryptographic signatures and uses hard-coded AES keys, which could lead to the executio...

Exploit for OS Command Injection in Tenda Ac15_Firmware

Tenda-Router-VR-and-Exploit...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2025-48976)

Summary IBM MQ appliance has addressed a denial of service vulnerability. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons...

CVE-2025-60336

A NULL pointer dereference in the sub41773C function of TOTOLINK N600R v4.3.0cu.7866B20220506 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

The vulnerability of the setSmartPowerManagement() function in the Tenda AC23 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetDeviceName function in the Tenda AC23 router’s microprogramming software is related to writing beyond buffer boundaries in memory when processing the time parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service...

Brother MFC-J4410DW Printers Cross-site Scripting (CVE-2015-1056)

Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages. This plugin only works with Tenable.ot. Please visit...

Brother MFC-J960DWN Printers Cross-site Request Forgery (CVE-2017-2244)

Cross-site request forgery CSRF vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

EUVD-2025-35619

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2025-35618

A NULL pointer dereference in the sub41773C function of TOTOLINK N600R v4.3.0cu.7866B20220506 allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

EUVD-2025-35586

TOTOLINK N600R v4.3.0cu.7866B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...