31 matches found
PT-2026-65570
In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the...
CVE-2026-49195
Unauthenticated Debug Service. The /sbin/mtkdut binary is exposed on TCP port 9000 without authentication, allowing any LAN-based attacker to execute arbitrary UCC commands...
PT-2026-44765
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An unauthenticated debug service is exposed on TCP port 9000. This allows a LAN-based attacker to execute arbitrary UCC commands via the '/sbin/mtk dut' binary...
CVE-2026-4795
A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00ACPS.2C0, GS1200-8v3 firmware versions through 1.00ACPT.2C0, GS1200-5HPv3 firmware versions through 1.00ACPU.2C0, GS1200-8HPv3 firmware versions through 1.00ACPV.2C0, and GS1200-10v3 firmware versions through...
EUVD-2026-31779
A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00ACPS.2C0, GS1200-8v3 firmware versions through 1.00ACPT.2C0, GS1200-5HPv3 firmware versions through 1.00ACPU.2C0, GS1200-8HPv3 firmware versions through 1.00ACPV.2C0, and GS1200-10v3 firmware versions through...
CVE-2026-0403
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections...
CVE-2026-0406
An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections...
CVE-2026-0406 Insufficient input validation in NETGEAR Nighthawk router XR1000v2
An insufficient input validation vulnerability in the NETGEAR XR1000v2 allows attackers connected to the router's LAN to execute OS command injections...
PT-2026-2629
Name of the Vulnerable Software and Affected Versions NETGEAR XR1000v2 affected versions not specified Description An insufficient input validation issue exists in the NETGEAR XR1000v2. This allows attackers connected to the router's LAN to execute OS command injections. The issue involves a lack...
CVE-2025-68716
KAYSUS KS-WR3600 routers running firmware version 1.0.5.9.1 are vulnerable to unauthorized access due to the SSH service being enabled by default on the LAN interface. The root account is configured with no password, and the management interface (CLI and web GUI) lacks the ability to disable SSH ...
PT-2025-46370
Name of the Vulnerable Software and Affected Versions NETGEAR R6260 versions through 1.1.0.86 NETGEAR R6850 versions through 1.1.0.86 Description A flaw exists in input validation within NETGEAR R6260 and R6850 devices. This allows unauthenticated attackers on the LAN to conduct Man-in-the-Middle...
EUVD-2021-26582
Malware in sbrugna...
EUVD-2022-41269
Malicious code in bioql PyPI...
EUVD-2022-40683
Malicious code in bioql PyPI...
EUVD-2022-39135
Malicious code in bioql PyPI...
CVE-2022-33735
There is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may use brute force cracking to obtain passwords, which may cause sensitive system information to be disclosed...
CVE-2022-33735
Summary (CVE-2022-33735) Huawei WS7200-10 devices (11.0.2.13) on LAN are affected by a password verification vulnerability due to an incorrect authentication algorithm implementation. Attackers on the LAN can perform brute-force attempts to obtain passwords, potentially leading to disclosure of s...
CVE-2022-38081
OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system...
