4608 matches found
CVE-2024-57544
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field lanipaddr is copied to the stack without length verification...
Linksys E8450 security vulnerabilities
The Linksys E8450 is an E-series wireless router from Linksys USA. A buffer overflow vulnerability exists in Linksys E8450 v1.2.00.360516, which originates when the lanipaddr parameter is copied to the stack without length validation, and can be exploited by a remote attacker to execute arbitrary...
PT-2025-2895
Name of the Vulnerable Software and Affected Versions XINJE XL5E-16T and XD5E-24R-E versions V3.5.3b through V3.7.2a Description The vulnerability is related to the handling of Modbus messages. When a TCP connection is established with the controllers within a local area network LAN, sending a...
Arista EOS security vulnerabilities
Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista USA. A security vulnerability exists in Arista EOS that stems from the fact that specially crafted packets with incorrect VLAN tags may be copied to the CPU, which may result in incorrect control...
CVE-2024-20153
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598...
PT-2025-49181
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions prior to 2.4.66 Description The Apache HTTP Server, when configured with Server Side Includes SSI enabled and utilizing mod cgid but not mod cgi, improperly handles shell-escaped query strings passed to exec cmd=".....
UBUNTU-CVE-2024-56648
In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fillframeinfo syzbot is able to feed a packet with 14 bytes, pretending it is a vlan one. Since fillframeinfo is relying on skb-maclen already, extend the check to cover this case...
PT-2024-10258 · Linksys · Linksys E8450
Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: A buffer overflow issue was discovered, where the lan ipaddr field is copied to the stack without length verification. This could allow a remote attacker to cause a denial of service. The...
Network WOL XSS
The vulnerability of the Network WOL function of the operating system for Synology Router Manager relates to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a remote attacker to perform cross-site attacks...
CISCO-SA-20180418-WLC
creationtimestamp| type| source ---|---|--- 2024-12-17 09:00:35+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113667342681977139...
CISCO-SA-20181017-WLC
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:54+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666794973785444...
Malicious code in lan-clean (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b77907fa5398dac2959c2fa6cc7ab1c451a318803ca9efb40ea52487080609c3 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...
MAL-2025-940 Malicious code in lan-clean (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b77907fa5398dac2959c2fa6cc7ab1c451a318803ca9efb40ea52487080609c3 During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...
Advantech EKI-6333AC Lan Apply Data Compromise
The vulnerability of the “lanapply” application programming interface of the microprogramming-based wireless access points of Advantech models EKI-6333AC-2G, EKI-6333AC-2GD, and EKI-6333AC-1GPO exists due to the failure to take measures to neutralize the special elements used in the operating...
Digi ConnectPort security vulnerabilities
Digi ConnectPort is a server from Digital Networks Malaysia Digi Inc. It provides wireless communication. A security vulnerability exists in Digi ConnectPort versions prior to 1.4.12, which originated from a vulnerability that allows an attacker on a local area network LAN to achieve unauthorized...
Synology Router Manager security vulnerability
Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A security vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-10, which stems from improper input neutralization in the Network WOL feature, which is...
CVE-2024-45204
A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potential...
CVE-2024-53937
An issue was discovered on Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default with admin/admin as default credentials and is exposed over the LAN. The allows attackers to execute arbitrary commands with root-level permissions...
CVE-2024-53938
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default and exposed over the LAN. The root account is accessible without a password, allowing attackers to achieve full control over the router remotely witho...
CVE-2024-53938
An issue was discovered in Victure RX1800 WiFi 6 Router software ENV1.0.0r12110933, hardware 1.0 devices. The TELNET service is enabled by default and exposed over the LAN. The root account is accessible without a password, allowing attackers to achieve full control over the router remotely witho...