The vulnerability in the /log/decodmail.php script of the D-Link DAR-7000 and DAR-8000 router microprogramming software allows a hacker to escalate their privileges, gain access to the system, and execute arbitrary code.

The vulnerability of the /log/decodmail.php script in the D-Link DAR-7000 and DAR-8000 router microprogramming systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to enhance their privileges, gain access to the system, and execu...

D-Link DIR-X4860 安全漏洞

The D-Link DIR-X4860 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-X4860 that stems from the use of hard-coded credentials, which allows an attacker to force the telnet service to be enabled and log in using hard-coded credentials...

TOTOLINK A720R 操作系统命令注入漏洞

The TOTOLINK A720R is a wireless router. TOTOLINK A720R suffers from an operating system command injection vulnerability. The vulnerability stems from the function exportOvpn, and no detailed vulnerability details are provided at this time...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a buffer overflow vulnerability that can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system, or cause an application to crash...

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 suffers from a buffer overflow vulnerability that can be exploited by an attacker to overflow a buffer and execute arbitrary code on the system, or cause an application to crash...

COMFAST CF-XR11 安全漏洞

COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version V2.7.2, which originates from a command injection vulnerability in the function sub424CB4, which allows an attacker to send a POST request message to...

Skyworth Router CM5100 安全漏洞

The Skyworth Router CM5100 is a single-band router with N300 speed from Skyworth China. A security vulnerability exists in the Hathway Skyworth Router CM5100 version 4.1.1.24, which originates from a vulnerability that allows a physically proximate attacker to obtain user credentials via SPI flas...

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China AUO D-Link. A security vulnerability exists in D-Link DI-8100 version v16.07.26A1, which originates from a stack overflow vulnerability in the dbsrvasp function...

TOTOLINK AC1200 T8 and AC1200 T10 cstecgi.cgi file setParentalRules function buffer overflow vulnerability

TOTOLINK AC1200 T8 and AC1200 T10 are wireless router devices. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 and AC1200 T10 cstecgi.cgi file setParentalRules function, which stems from the desc parameter not being validated for proper length. An attacker could exploit this...

TOTOLINK AC1200 操作系统命令注入漏洞

The TOTOLINK AC1200 T8 is a wireless router that supports dual-band Wi-Fi at 1200Mbps rate for home or small office scenarios. The TOTOLINK AC1200 T8 suffers from an OS command injection vulnerability located in the /cgi-bin/cstecgi.cgi file, where the slaveIpList parameter is not validated with...

DrayTek Vigor3900 安全漏洞

DrayTek Vigor3900 is a high-performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor3900 v1.5.1.6, which originates from an authenticated command injection vulnerability via the value parameter in the filterstring function...

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. A security vulnerability exists in Tenda FH1201 v1.2.0.14, which is caused by a stack buffer overflow vulnerability in "formWrlExtraGet". The vulnerability is caused by a stack buffer overflow vulnerability in "formWrlExtraGet"...

D-Link DI_8004W msp_info_htm Function Command Execution Vulnerability

D-Link DI8004W is an Internet Behavior Management router designed for small and medium-sized businesses by AUO, supporting 40-50 devices to access the network at the same time. The D-Link DI8004W suffers from a command execution vulnerability that stems from the inclusion of the jhttpd mspinfohtm...

D-Link DI_8004W upgrade_filter_asp Function Command Execution Vulnerability

D-Link DI8004W is an Internet Behavior Management router from AUO D-Link designed for small and medium-sized businesses, supporting 40-50 devices to access the network at the same time. The D-Link DI8004W suffers from a command execution vulnerability that stems from the jhttpd upgradefilterasp...

TOTOLINK AC1200 安全漏洞

TOTOLINK AC1200 is a dual-band Wi-Fi router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 suffers from a buffer overflow vulnerability that originates from the parameter wlanidx of the formWlanRedirect function failing to properly validate the length and size of the input data, whic...

D-Link DIR-846W Command Execution Vulnerability (CNVD-2025-18481)

D-Link DIR-846W is a dual-band Gigabit wireless router with second-generation 11AC technology and MU-MIMO technology, supporting dual-band concurrent transmission rates up to 1200Mbps for 200M and above broadband users. A command execution vulnerability exists in the D-Link DIR-846W. The...

Tenda AX1806 安全漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. The Tenda AX1806 suffers from a stack overflow vulnerability that stems from the iptv.city.vlan parameter in the function setIptvInfo containing a stack overflow. No detailed vulnerability details are provided at this time...

Xiaomi AX9000 安全漏洞

Xiaomi Router AX9000 is the third generation of Xiaomi's flagship Wi-Fi6 product released on March 29, 2021- with support for WiFi6 Enhanced and a maximum theoretical rate of up to 3.5Gbps. Xiaomi Technology LLC Xiaomi Router AX9000 has a binary vulnerability that can be exploited by an attacker ...

PT-2024-31181 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: The issue is a stack overflow that occurs through the adv.iptv.stbpvid parameter in the setIptvInfo function. This allows for potential exploitation. No information is provided about the estimated...