373 matches found
CVE-2020-29669
Macally WIFISD2-2A82 CVE-2020-29669 の解説 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== これは、Macally WIFISD2-2A82 トラベルルーター（ファームウェアバージョン 2.000.010）の悪用に関する解説です。ゲストユーザーは自身のパスワードをリセットできます。この処理には脆弱性があり、管理者アカウントを乗っ取り、シェルアクセスを得ることができます。管理者ユーザーは /etc/shadow...
CVE-2021-41653
CVE-2021-41653 TP-Link TL-WR840N EU v5 リモートコード実行 参照: https://k4m1ll0.com/cve-2021-41653.html...
Netgear R6850 - Information Disclosure
Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the debuginfo.htm page. This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as product model name, WAN connection type, and...
CVE-2023-48849
CVE-2023-48849 Ruijie EGシリーズルーターのファームウェア =EG3.01B11P216は、不適切なフィルタリングにより、認証されていない攻撃者がリモートで任意のコードを実行することを許可します。 $ python3 poc.py 192.168.1.1 'id' uid=0root gid=0root $ python3 poc.py 192.168.1.1 'grep TARGET /etc/openwrtrelease' DISTRIBTARGET='mediatek/eg310gh-e' デモ...
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383
Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 脆弱性の説明: ルーターファームウェアのセキュリティ評価中に、ルーターに接続されているデバイス（携帯電話、ノートパソコン、タブレットなど）に関する機密情報が平文で保存されており、攻撃者がそれを悪用する可能性があることが確認されました。 製品ベンダー: Hathway 影響を受ける製品: CM5100-511 影響を受けるバージョン: 4.1.1.24 脆弱性スコア V3.1: 5.2 Medium...
VulnCheck KEV: CVE-2025-60687
An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619B20230130 within the cstecgi.cgi binary sub41EC68 function. The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters long. The parameter is the...
CVE-2026-6017
Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...
CVE-2026-6017 Missing Authentication for Critical Function in KAON PG5298
Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the administrative portal. This vulnerability has been fixed in firmware version: 3.0.82 for PG5298A and 4.0.82 for PG5298B...
CVE-2026-19982
A security vulnerability has been detected in GL.iNet BE9300 and MT6000 4.8.x. This vulnerability affects unknown code of the component Firewall-management RPC. The manipulation of the argument destport/destip leads to os command injection. The attack may be initiated remotely. Upgrading to versi...
CVE-2026-19979
GL.iNet devices listed (A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000, XE3000) are affected by CVE-2026-19979 in the WebDAV Service COPY/MOVE functionality, which can bypass authorization. The vulnerability enables a...
CVE-2026-73673
Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher. Attackers can send ...
CVE-2026-9214
Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...
CVE-2026-11738
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...
CVE-2026-11735
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality...
EUVD-2026-56196
Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...
CVE-2026-11736
Technical details (affected models, root cause, patch info) are not publicly available in the provided documents; monitor for updates.
EUVD-2026-56195
A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality...
CVE-2026-11735 Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models
A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality...
CVE-2026-11738 Insufficient input validation in certain NETGEAR Nighthawk routers allows administrators to tamper with the device.
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality...