EulerOS 2.0 SP13 : radvd (EulerOS-SA-2026-4193)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

EulerOS 2.0 SP13 : radvd (EulerOS-SA-2026-4102)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

EulerOS 2.0 SP11 : radvd (EulerOS-SA-2026-4374)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

CVE-2020-23589

CVE-2020-23589 OPTILINK E-PON "MODEL NO: OP-XT71000N" with "HARDWARE VERSION: V2.2"; & "FIRMWARE VERSION: OPV3.3.1-191028" Found vulnerability in the "OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OPV3.3.1-191028" which allows an unauthenticated, remote attacker to conduct a...

refresh

Refresh This container emulates the vulnerable functionality of CVE-2022-1388 in an F5 Router allowing RCE. CVE-202201388 stems from a complicated relationship between different authentication mechanisms and broxying that stripped Headers allowing improper access to admin endpoints in the webapp...

CVE-2023-48849

CVE-2023-48849 Ruijie EG Series Routers firmware =EG3.01B11P216 allows unauthenticated attackers to remotely execute arbitrary code due to incorrect filtering. $ python3 poc.py 192.168.1.1 'id' uid=0root gid=0root $ python3 poc.py 192.168.1.1 'grep TARGET /etc/openwrtrelease'...

Malicious code in dex-router-abis (RubyGems)

Source: amazon-inspector a8f8b62993678b4f720468a05ef91f6fdcc864dd6be78d1ffc6bd14125f18d8f The gem's extconf.rb executed automatically during gem install decodes a base64-encoded Ruby payload and executes it via a double-forked, detached process that sleeps 20-40 minutes before opening a TCP rever...

rpef

Router Post-Exploitation Framework Actualmente, el framework incluye una serie de módulos de imagen de firmware: 'Verificado' - Este módulo está confirmado para funcionar y es estable. 'No verificado' - Se cree que este módulo funciona o debería funcionar con poco esfuerzo adicional, pero está...

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383

Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 Vulnerability Description: During the security assessment of the Router firmware, it was observed that sensative information regarding the devices connected to router such as Mobile phone,Laptos, Tablets is...

CVE-2026-19598

🚨 CVE-2026-19598 https://plugins.trac.wordpress.org/browser/pods/tags/3.3.9/includes/general.phpL400 The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists...

CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

CVE-2026-108857

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured apikey because the router's Args struct lacks a redact attribute for it. Attackers with access to router logs, container output, or OTLP telemetry can recover the Bearer tok...

CVE-2026-108858

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108858

A flaw was found in lorax. The service writes caller-supplied API Application Programming Interface tokens from request bodies directly into router logs and tracing data. An attacker with access to system logs or telemetry backends can exploit this flaw to view other users' private authentication...

CVE-2026-108858

Predibase LoRAX versions up to and including 0.12.1 are vulnerable to a sensitive information exposure issue. The application improperly records the caller-supplied api_token from POST /generate request bodies into the router logs. This occurs because the GenerateParameters span field is instrume...

EUVD-2026-97009

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108858 Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108858 Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs

Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied apitoken from POST /generate request bodies into router logs. Attackers with access to router logs or OTLP trace backends can recover other users' private-adapter tokens recorded...

CVE-2026-108857 Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging

Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured apikey because the router's Args struct lacks a redact attribute for it. Attackers with access to router logs, container output, or OTLP telemetry can recover the Bearer tok...

CVE-2025-26202-Details

CVE-2025-26202-Details CVE-2025-26202: Cross-Site Scripting XSS in DZS Router Web Interface Description A Cross-Site Scripting XSS vulnerability exists in the WPA/WAPI Passphrase field of the Wireless Security settings 2.4GHz & 5GHz bands in the DZS Router Web Interface. An authenticated attacker...