UTT 512W strcpy() Code Execution

The vulnerability of the strcpy function in the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted POST request...

Multi-Router Looking Glass Heap Buffer Overflow

The vulnerability of the Multi-Router Looking Glass MRLG software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Synology Router Manager DDNS Record Command Execution

The vulnerability of the DDNS Record component of the operating system used to manage Synology Router Manager devices relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Synology Router Manager NTP Region Command Execution

The vulnerability of the NTP Region component of the operating system used to manage Synology Router Manager devices is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Synology Router Manager Arbitrary Command Execution

The vulnerability of the VPN Settings component of the operating system used to manage Synology Router Manager relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

EUVD-2026-0903

A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of the component httpd. Executing a manipulation of the argument modulename/option/data/switch can lead to command injection. The attack can b...

UTT 520W security vulnerability

The UTT 520W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 520W version 1.7.7-180627, which originates from an incorrect manipulation of the parameter passwd1 of the function strcpy in the file /goform/formUser, which could result in a buffer overflow...

UTT 520W security vulnerability

The UTT 520W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 520W version 1.7.7-180627, which originates from an incorrect manipulation of the parameter timestart in the file /goform/ConfigAdvideo, which could lead to a buffer overflow...

D-Link’s various products have vulnerabilities related to access control.

The D-Link DSL-2740R and other products are products of China AUO D-Link.The D-Link DSL-2740R is a high-performance ADSL router.The D-Link DSL-2640B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed...

FreeBSD Kernel rtsol rtsold Code Execution

The vulnerability of demons for processing Router Solicitation and Router Advertisement in IPv6, represented by rtsol8 and rtsold8 in FreeBSD kernels, is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute...

I-O Data Device UD-LT2 Router Command Execution

The vulnerability of the I-O Data Device UD-LT2 router’s microprogramming software exists due to the lack of measures taken to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-605 Router Command Execution

The vulnerability of the embedded software loading service for D-Link DIR-605 routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

UTT 512W security vulnerabilities

The UTT 512W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 512W version 1.7.7-171114, which originates from an incorrect operation of the function strcpy in the file /goform/formRemoteControl, which could result in a buffer overflow...

UTT 512W security vulnerabilities

The UTT 512W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 512W version 1.7.7-171114, which originates from an incorrect operation of the function strcpy in the file /goform/formFtpServerDirConfig, which could result in a buffer overflow...

UTT 512W security vulnerabilities

The UTT 512W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 512W version 1.7.7-171114, which originates from an incorrect operation of the function strcpy in the file /goform/formConfigCliForEngineerOnly, which could result in a buffer overflow...

Improving Router Security Using BERT

Previous work on home router security has shown that using system calls to train a transformer-based language model built on a BERT-style encoder using contrastive learning is effective in detecting several types of malware, but the performance remains limited at low false positive rates. In this...

UTT 512W security vulnerabilities

The UTT 512W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 512W version 1.7.7-171114, which originates from an incorrect operation of the function strcpy in the file /goform/formFtpServerShareDirSelcet, which could result in a buffer overflow...

TP-Link TL-WR820N 2.80 Weak Cryptography

TP-Link TL-WR820N version 2.80 uses weak cryptographic algorithms for SSH...

CVE-2015-10145

Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/runcommands.sh. The application fails to properly restrict or validate input supplied via the 'commands' parameter, allowing an authenticated attacker to execute arbitrary she...

EUVD-2025-206085

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclos...