App Router Next.js Vercel CLI compromise Data Compromise

The vulnerability of the App Router router on the Next.js software development platform and the Vercel command-line interface CLI platform is related to shortcomings in HTTP request processing. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

UTT Progressive 512W Memory Corruption Vulnerability

The UTT Progressive 512W is an enterprise-grade wireless router from Atech UTT designed for small and medium-sized businesses SOHO and similarly sized network environments for access scenarios of 30 to 50 users. The UTT Progress 512W suffers from a memory corruption vulnerability that originates...

FreeBSD rtsold 15.x - Remote Code Execution via DNSSL

Exploit Title: FreeBSD rtsold 15.x - Remote Code Execution via DNSSL Date: 2025-12-16 Exploit Author: Lukas Johannes Möller Vendor Homepage: https://www.freebsd.org/ Version: FreeBSD 13.x, 14.x, 15.x before 2025-12-16 patches Tested on: FreeBSD 14.1-RELEASE CVE: CVE-2025-14558 Description: rtsold...

UTT 512W security vulnerabilities

The UTT Progressive 512W is an enterprise-grade wireless router from Atech UTT designed for small and medium-sized businesses SOHO and similarly sized network environments for access scenarios of 30 to 50 users. UTT Progressive 512W suffers from a buffer overflow vulnerability that originates fro...

JD Cloud BE6500 command injection vulnerability

The JD Cloud BE6500 is a WiFi router from the Chinese company Jingdong JD. A command injection vulnerability exists in the JD Cloud BE6500 version 4.4.1.r4308, which stems from misuse of the parameter ddnsname of the function sub4780 in the file /jdcapi, which could lead to a command injection...

CVE-2025-68376 coresight: ETR: Fix ETR buffer use-after-free issue

In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CSMODESYSFS, if the buffer size is changed and enabled again, currently sysfsbuf will point to the newly allocated memorybufnew and free the old...

Security Risks Introduced by Weak Authentication in Smart Home IoT Systems

Smart home IoT systems rely on authentication mechanisms to ensure that only authorized entities can control devices and access sensitive functionality. In practice, these mechanisms must balance security with usability, often favoring persistent connectivity and minimal user interaction. This...

MAL-2025-192803 Malicious code in init-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d018c8963d1a91fc672bfe128a7699635fb3dd34a7df393119baee24d44a3d0 The package init-router was found to contain malicious code...

Malicious code in init-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d018c8963d1a91fc672bfe128a7699635fb3dd34a7df393119baee24d44a3d0 The package init-router was found to contain malicious code...

EUVD-2023-60236

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

PT-2025-52874

CVE-2025-68650 - Cisco Router Unauthenticated Remote Command Execution CVE ID : CVE-2025-68650 Published : Dec. 23, 2025, 4:15 a.m. | 2 hours, 43 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products,...

PT-2025-52877

CVE-2025-68653 - Cisco Router Unvalidated User Input CVE ID : CVE-2025-68653 Published : Dec. 23, 2025, 4:15 a.m. | 2 hours, 43 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Linksys E5600 security vulnerabilities

Linksys E5600 is a powerful, compact and reliable WiFi 5 router from Linksys, Inc. A security vulnerability exists in Linksys E5600 version V1.1.0.26, which stems from a command injection in the ddnsStatus function...

Tenda AX3 Wi-Fi Router DoS

The vulnerability of the wlSetExternParameter function in Tenda AX3 Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-29228

Linksys E5600 router firmware version 1.1.0.26 is vulnerable to a command injection flaw in the runtime.macClone function. The vulnerability is triggered via the mc.ip parameter, potentially allowing an attacker to execute arbitrary commands. To remediate this, users should update to a newer vers...

CVE-2023-53974

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

CVE-2023-53974

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

CVE-2023-53974 D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

CVE-2023-53974 D-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

CVE-2025-15010

The CVE-2025-15010 entry concerns Tenda WH450 1.0.0.18. A stack-based buffer overflow occurs in the SafeUrlFilter handler (/goform/SafeUrlFilter) when the page parameter is manipulated, enabling remote exploitation. Public PoC/exploit disclosures exist, and multiple sources classify the vulnerabi...