CVE-2012-5968

The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive user information and the session ID, and modify data, by leveraging access to the LAN network...

CVE-2012-5991

screens/base/webauthcustom.html on Cisco Wireless LAN Controller WLC devices with software 7.2.110.0 allows remote authenticated users to cause a denial of service device reload via a certain buttonClicked value in an internal webauthtype request, aka Bug ID CSCud50209...

CVE-2002-2174

The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service memory consumption via a large number of connections...

Versatile Quantum-Safe Hybrid Key Exchange and Its Application to MACsec

Advancements in quantum computing pose a significant threat to most of the cryptography currently deployed. Fortunately, cryptographic building blocks to mitigate the threat are already available; mostly based on post-quantum and quantum cryptography, but also on symmetric cryptography techniques...

CVE-2025-40634: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.15 build 241203 rel61480. This vulnerability allows an attacker to execute arbitrary code on the device over LAN and WAN networks...

CLSA-2025-1747688831 kernel: Fix of 20 CVEs

drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleupreq CVE-2024-57798 - block: Fix handling of offline queues in blkmqallocrequesthctx CVE-2022-49720 - drm: nv04: Fix out of bounds access CVE-2024-27008 - parport: Proper fix for array out-of-bounds access CVE-2024-50074 - Bluetooth:...

D-Link DIR-619L Wake On LAN Code Execution

The vulnerability of the wakeonlan function in D-Link DIR-619L router software lies in the lack of measures taken to clean data at the control level when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DIR-605L Wake On LAN Command Execution

The vulnerability of the wakeonlan function in D-Link DIR-605L router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

Vulnerabilities fixed in Microsoft Defender

Microsoft has fixed vulnerabilities in Defender for Endpoint and Defender for Identity. A malicious party could exploit the vulnerabilities to impersonate another user and assign themselves elevated privileges, enabling execution of arbitrary code with SYSTEM privileges. For successful...

CVE-2025-20186

A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambassador user account to perform a command injection attack against an affected device. This vulnerability is due to...

CVE-2025-4454

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wakeonlan. The manipulation of the argument mac leads to command injection. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

CVE-2025-4445

A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wakeonlan. The manipulation of the argument mac leads to command injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure. This...

CVE-2025-4445

CVE-2025-4445 affects D-Link DIR-605L firmware 2.13B01, where the wake_on_lan function takes a mac argument that can be manipulated to trigger command injection. The vulnerability enables remote code execution over the network and is described across multiple sources (NVD, CNVD, Red Hat, CIRCL) w...

D-Link DIR-619L has a vulnerability regarding injection

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the wakeonlan function mac parameter failing to correctly filter constructed command special characters, commands, and so on. No details of the...

PT-2025-20443 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A critical issue has been discovered, affecting the wake on lan function. The manipulation of the mac argument leads to command injection. This issue can be exploited remotely. The vendor was...

PT-2025-20457 · D Link · D-Link Dir-619L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.04B04 Description: A critical issue affects the wake on lan function, where manipulation of the mac argument leads to command injection. This can be initiated remotely. The vendor was contacted about this disclosure...

CVE-2025-20186

CVE-2025-20186 affects Cisco IOS XE Software, specifically the web-based management interface of the Wireless LAN Controller. The vulnerability arises from insufficient input validation in the WLC web UI, allowing an authenticated attacker with a lobby ambassador account to inject arbitrary CLI c...

PT-2025-20258 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in the web-based management interface of the Wireless LAN Controller feature could allow an authenticated, remote attacker with a lobby ambassador user account...

CVE-2025-20191: Buffer Access with Incorrect Length Value

A vulnerability in the Switch Integrated Security Features SISF of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected...

PT-2025-20263

Name of the Vulnerable Software and Affected Versions Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco NX-OS Software affected versions not specified Cisco Wireless LAN Controller WLC AireOS Software affected versions not specified...