Lucene search
+L

2317 matches found

CNNVD
CNNVD
added 2023/06/02 12:00 a.m.13 views

Hitron Technologies CODA 操作系统命令注入漏洞

Hitron Technologies CODA-5310 is a wireless router. The Hitron Technologies CODA-5310 suffers from a remote command execution vulnerability that can be exploited by an attacker to perform a command injection attack using the administration page to execute arbitrary system commands, manipulate the...

7.2CVSS8.1AI score0.01281EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.14 views

H3C Magic R300-2100M 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the DeltriggerList interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer overfl...

7.2CVSS8.1AI score0.04353EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.13 views

H3C Magic R300-2100M 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in H3C Magic R300-2100M V100R004 version, which stems from the presence of a stack overflow...

7.2CVSS7.2AI score0.00933EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:00 a.m.11 views

The vulnerability of D-Link DIR-601 router’s microprogramming software, which involves transmitting critical information in plaintext, allows attackers to enhance their privileges.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to the transmission of critical information in plaintext. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS7.5AI score0.76507EPSS
SaveExploits4References5Affected Software1
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.12 views

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. The H3C Magic R300 suffers from a stack overflow vulnerability that is caused by incorrect boundary checking of the UpdateWanParams interface on /goform/aspForm. An attacker can exploit this vulnerability to cause a buffer...

7.2CVSS8.1AI score0.00933EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/25 12:00 a.m.21 views

The vulnerability of the microprogramming software of the Parks Fiberlink 210 exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands, allowing attackers to execute arbitrary commands on the server.

The vulnerability of the Parks Fiberlink 210 router’s microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the server using t...

10CVSS7.5AI score0.05245EPSS
SaveExploits2References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:00 a.m.14 views

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 router microprogramming systems exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

10CVSS8.1AI score0.03678EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:00 a.m.12 views

The vulnerability of the /goform/sylogapply component in the D-Link DIR-816 A2 router’s microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/sylogapply component in the D-Link DIR-816 A2 router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

10CVSS8.1AI score0.07381EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:00 a.m.11 views

The vulnerability of the /goform/formLogin component in the D-Link DIR-816 A2 microprogramming router software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogrammed software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS8.3AI score0.01892EPSS
SaveExploits1References2
Prion
Prion
added 2023/05/16 3:15 p.m.34 views

Remote code execution

Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution RCE vulnerability via the Mac parameter at ip/goform/WriteFacMac...

7.5CVSS9.9AI score0.01998EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/05/16 12:00 a.m.15 views

Tenda AC5 安全漏洞

Tenda AC5 is a wireless router from Tenda, a Chinese company. A code execution vulnerability exists in Tenda AC5 version V15.03.06.28, which stems from the Mac parameter of ip/goform/WriteFacMac failing to correctly filter special elements of the constructed snippet. An attacker can exploit this...

9.8CVSS8.3AI score0.01998EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/12 12:00 a.m.45 views

H3C R160 安全漏洞

The H3C R160 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C R160 V1004004 version that stems from a stack-based buffer overflow due to incorrect manipulation of the parameter go...

9.8CVSS6.9AI score0.00982EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/11 12:00 a.m.12 views

Motorola CX2 命令注入漏洞

The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability exists in the Motorola CX2L Router version 1.0.1, which was discovered to contain a command injection vulnerability via the tomographypingnumber parameter...

8.8CVSS8AI score0.0221EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/05/09 12:00 a.m.14 views

PT-2023-3463 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this issue...

8.8CVSS8.9AI score0.01467EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/05/03 12:00 a.m.16 views

The vulnerability of the zhttpd component in the libclinkc.so library of the ZyXEL DX5401-B0 router’s software allows a malicious actor to execute certain operating system commands remotely.

The vulnerability of the zhttpd component in the libclinkc.so library of the ZyXEL DX5401-B0 router microprogramming system is related to the possibility of buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to execute certain commands on the operating system...

9.6CVSS8.3AI score0.0542EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/05/02 12:00 a.m.12 views

The vulnerability of D-Link DIR878 router’s microprogramming software allows for the execution of arbitrary code within the system using specially created payloads, or triggering a Denial-of-Service attack (DoS).

The vulnerability of D-Link DIR878 router’s microprogramming software is related to a stack overflow in function sub495220. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system using a specially created payload, or to trigger a Denial-of-Service attack...

10CVSS8.2AI score0.01297EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/05/01 12:00 a.m.11 views

D-Link DIR-879 授权问题漏洞

The D-Link DIR-879 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-879 v1.05A1 release version, which stems from an easy authentication bypass via phpcgi...

7.5CVSS7.3AI score0.01112EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/21 12:00 a.m.12 views

H3C Magic R200 缓冲区错误漏洞

The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V100R004 version, which stems from the discovery of an UpdateSnat interface via /goform/aspForm that contains a stack overflow vulnerability...

4.9CVSS5.5AI score0.00787EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/21 12:00 a.m.15 views

H3C Magic R200 缓冲区错误漏洞

The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V100R004 version, which stems from the discovery of a stack overflow vulnerability contained in the UpdateWanParams interface via /goform/aspForm...

4.9CVSS5.5AI score0.00787EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/21 12:00 a.m.14 views

H3C Magic R200 缓冲区错误漏洞

The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V100R004 version, which stems from the discovery of a stack overflow vulnerability contained via the SetMobileAPInfoById interface of /goform/aspForm...

4.9CVSS5.5AI score0.00787EPSS
SaveExploits0References2
Rows per page
Query Builder