CVE-2024-36788

Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices...

PT-2024-4073 · NetGear · Netgear Wnr614

Name of the Vulnerable Software and Affected Versions: Netgear WNR614 version N300-V1.1.0.54 1.0.1 Description: The issue is related to weak password requirements in the Netgear WNR614 N300 Wi-Fi router, allowing attackers to create passwords that do not conform to defined security standards. Thi...

CVE-2024-36795

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotel...

CVE-2023-30314

An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

Wavlink QUANTUM D2G 安全漏洞

Wavlink QUANTUM D2G is a dual-band, full-gigabit WiFi router from China-based Wavlink. A security vulnerability exists in the Wavlink QUANTUM D2G that originates from the router allowing an attacker to hijack a TCP session, which could result in a denial of service...

PT-2024-12233 · 360 · 360 T6M +3

Name of the Vulnerable Software and Affected Versions: 360 V6G affected versions not specified 360 T5G affected versions not specified 360 T6M affected versions not specified 360 P1 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, which...

TOTOLINK CP900L 安全漏洞

The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK CP900L NTPSyncWithHost function, which can be exploited by an attacker to execute arbitrary commands...

H3C Magic R100 安全漏洞

H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100, H3C Magic R365, which stems from a vulnerability that allows an attacker to hijack a TCP session, which could lead to a denial of service attack...

The vulnerability of the frmL7PlotForm function in the microprogramming software for Tenda W30E allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromDhcpListClient function in the Tenda W30E router software relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...

The vulnerability of the formTcpipSetup function in D-Link DIR-619L router software allows a hacker to cause a service failure.

The vulnerability of the formTcpipSetup function in D-Link DIR-619L router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using the curTime parameter...

Command Execution Vulnerability in NBR6210-E of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-26904)

The NBR6210-E is a router product. A command execution vulnerability exists in the NBR6210-E of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to gain control of a server...

The vulnerability of the addWlProfileClientMode function in TOTOLINK CP450 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the addWlProfileClientMode function in TOTOLINK CP450 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the setMacFilterRules function in TOTOLINK CP450 router microprogramming software allows a intruder to execute arbitrary code.

The vulnerability of the setMacFilterRules function in TOTOLINK CP450 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

D-Link DIR-2150 安全漏洞

The D-Link DIR-2150 is a wireless router from China-based AUO D-Link. The D-Link DIR-2150 suffers from a code execution vulnerability that stems from an application failing to properly filter special elements that construct code segments. An unauthenticated attacker could exploit the vulnerabilit...

D-Link G416 安全漏洞

The D-Link G416 is a wireless router from China-based AUO D-Link. The D-Link G416 suffers from a code execution vulnerability that stems from the application failing to properly filter special elements that construct code segments. An attacker could exploit the vulnerability to cause arbitrary co...

D-Link DIR-619L formWlanSetup_Wizard function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the parameter webpage of...

The vulnerability of D-Link DIR-600 router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to increase their privileges.

The vulnerability of D-Link DIR-600 router’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to enhance their privileges by intercepting authentication requests remotely...