394 matches found
CVE-2020-35391-POC
Bienvenido a CVE-2020-35391-POC 👋 Tenda N300 Omisión de autenticación mediante un encabezado de solicitud HTTP malformado Python PoC Los dispositivos Tenda N300 F3 12.01.01.48 permiten a atacantes remotos obtener información sensible posiblemente incluyendo una línea httppasswd mediante una...
CVE-2025-65427
CVE-2025-65427: Problema de Limitación de Tasa de Autenticación en Dbit N300 T1 Pro ID de CVE: CVE-2025-65427 Fecha: 2025-12-16 Descubridor: Kirubel Producto: Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router Versión de Firmware: V1.0.0 Descripción Se descubrió un problema en el Dbit N300 T1 Pro...
CVE-2025-71384
Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...
CVE-2025-71383
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...
CVE-2025-71384
Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...
EUVD-2025-211036
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...
EUVD-2025-211035
Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...
CVE-2025-71384
Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...
CVE-2025-71383
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...
PT-2026-106806
Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...
CVE-2025-71384
The Dbit WIFI4 N300 1.0.0 devices are vulnerable to a stack-based buffer overflow in the /api/addStaticDHCP comment field. This flaw allows administrators connected to the local Wi-Fi network to achieve remote code execution by executing arbitrary OS commands. While a proof of concept is mentione...
PT-2026-106805
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...
CVE-2025-71383
The Dbit WIFI4 N300 1.0.0 devices are vulnerable to a crash of the management interface. This issue arises from an error in a JSON parser when processing a request from the local Wi-Fi network that lacks a username or password field for the /api/login endpoint. While a reference link is provided,...
CVE-2025-71383
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request from the local Wi-Fi network that lacks a /api/login username or password field. This occurs because of an error in a JSON parser...
CVE-2026-79588
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...
CVE-2026-79588
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...
CVE-2026-79588
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...
CVE-2026-79588
The U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to the cleartext transmission of administration credentials over HTTP . This flaw allows for the potential interception of sensitive login information. Exploitation details and specific remediation steps are not provided in the available documents.