28725 matches found
Tenda AC23 Router Arbitrary Command Execution
The vulnerability of the saveParentControlInfo function in the Tenda AC23 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
Tenda AC15 Router Access Control Unauthorized Information Disclosure
The vulnerability of the Tenda AC15 router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
PT-2025-48019
A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security...
ASUS Router security vulnerabilities
ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A command injection vulnerability exists in ASUS Router, which can be exploited by an attacker to cause the device to execute...
CVE-2025-59372: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on...
PT-2025-48021
An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This vulnerability does not affect Wi-Fi 7 series models. Refer to the 'Security...
ASUS Router security vulnerabilities
ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. ASUS Router suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally enter...
PT-2025-48020
A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary commands, leading to the device executing unintended instructions. Refer to the 'Security Update for ASUS Router Firmware' section on...
ASUS Router security vulnerabilities
ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. An authentication bypass vulnerability exists in ASUS Router, which can be exploited by an attacker to cause unauthorized devic...
Linux Distros Unpatched Vulnerability : CVE-2025-62397
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The router's inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance. CVE-2025-62397 No...
ASUS Router security vulnerabilities
ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. An authentication bypass vulnerability exists in ASUS Router, which stems from an unexpected side effect of Samba functionality...
ASUS Router security vulnerabilities
ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. An integer underflow vulnerability exists in ASUS Router, which can be exploited by an attacker to cause the availability of th...
ASUS Router security vulnerabilities
ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. A path traversal vulnerability exists in ASUS Router, which can be exploited by an attacker to cause the integrity of the devic...
CVE-2025-59368: Integer Underflow (Wrap or Wraparound)
An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security...
CVE-2025-12003: Missing Authentication for Critical Function
A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information...
ASUS Router security vulnerabilities
ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. ASUS Router suffers from a stack buffer overflow vulnerability that originates from a boundary error when the application handl...
Tenda AC21 Router Command Execution
The vulnerability of the formSetPPTPServer function in the Tenda AC21 router microprogramming system lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
D-Link DSP-W110A1 Router CookieHandler Arbitrary Command Execution
The vulnerability of the CookieHandler component in D-Link’s DSP-W110A1 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2025-48016
Name of the Vulnerable Software and Affected Versions ASUS Router Firmware affected versions not specified Description A stack buffer overflow condition exists in certain router models. An authenticated attacker can trigger this issue by sending a specially crafted request, which may lead to a...
