The vulnerability of the file /squashfs-root/web_cste/cgi-bin/product.ini of the TOTOLink T10 router microprogramming software allows a intruder to gain unauthorized access to the Telnet service.

The vulnerability of the file /squashfs-root/webcste/cgi-bin/product.ini of the TOTOLink T10 microprogramming router software is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the Telnet service...

TP-LINK TL-WR941ND 安全漏洞

TP-LINK TL-WR941ND is a wireless router from China Pop-Up Union TP-LINK. A security vulnerability exists in TP-LINK TL-WR941ND version V6, which originates from a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm...

The vulnerability of the msp_info_htm function in D-Link DI-8004W router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the mspinfohtm function in D-Link DI-8004W router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the setDefResponse() function (/www/cgi-bin/cstecgi.cgi) in the TOTOLINK EX1200L router software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setDefResponse function /www/cgi-bin/cstecgi.cgi of the TOTOLINK EX1200L router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Exploit for Command Injection in Telesquare Tlr-2005Ksh_Firmware

CVE-2024-29269 Which allows unauthenticated OS command executi...

PT-2024-7235 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: The issue is related to a buffer overflow vulnerability in the formSetWanL2TP function of the /goform/formSetWanL2TP file. This vulnerability can be exploited by sending a specially crafted PO...

CVE-2024-44678

Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the ssid parameter in the request...

TOTOLINK A720R exportOvpn OS Command Injection Vulnerability

The TOTOLINK A720R is a wireless router. TOTOLINK A720R suffers from an operating system command injection vulnerability. The vulnerability stems from the function exportOvpn, and no detailed vulnerability details are provided at this time...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the trapcomm parameter on the cgiswm.cgi page that fails to properly validate the length of the input data, an...

ZTE多款产品 安全漏洞

ZTE ZXHN H168N and others are products of ZTE Corporation ZTE, China.ZTE ZXHN H168N is a router.ZTE ZXHN E500 is a wireless router.ZTE ZXHN H168A is a wireless router. A security vulnerability exists in various ZTE products, which stems from the presence of a stack-based buffer overflow...

The vulnerability in the /log/decodmail.php script of the D-Link DAR-7000 and DAR-8000 router microprogramming software allows a hacker to escalate their privileges, gain access to the system, and execute arbitrary code.

The vulnerability of the /log/decodmail.php script in the D-Link DAR-7000 and DAR-8000 router microprogramming systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges, gain access to the system, and execu...

D-Link DIR-X4860 安全漏洞

The D-Link DIR-X4860 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-X4860 that stems from the use of hard-coded credentials, which allows an attacker to force the telnet service to be enabled and log in using hard-coded credentials...

TOTOLINK A720R 操作系统命令注入漏洞

The TOTOLINK A720R is a wireless router. TOTOLINK A720R suffers from an operating system command injection vulnerability. The vulnerability stems from the function exportOvpn, and no detailed vulnerability details are provided at this time...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a buffer overflow vulnerability that can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system, or cause an application to crash...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a buffer overflow vulnerability that can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system, or cause an application to crash...

COMFAST CF-XR11 安全漏洞

COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version V2.7.2, which originates from a command injection vulnerability in the function sub424CB4, which allows an attacker to send a POST request message to...

Skyworth Router CM5100 安全漏洞

The Skyworth Router CM5100 is a single-band router with N300 speed from Skyworth China. A security vulnerability exists in the Hathway Skyworth Router CM5100 version 4.1.1.24, which originates from a vulnerability that allows a physically proximate attacker to obtain user credentials via SPI flas...

TOTOLINK AC1200 T8 and AC1200 T10 cstecgi.cgi file setParentalRules function buffer overflow vulnerability

TOTOLINK AC1200 T8 and AC1200 T10 are wireless router devices. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 and AC1200 T10 cstecgi.cgi file setParentalRules function, which stems from the desc parameter not being validated for proper length. An attacker could exploit this...

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China AUO D-Link. A security vulnerability exists in D-Link DI-8100 version v16.07.26A1, which originates from a stack overflow vulnerability in the dbsrvasp function...