Cisco Small Business 操作系统命令注入漏洞

Cisco Small Business is a switch from Cisco USA. A security vulnerability in the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to unexpectedly reboot, resulting in a...

WAVLINK WN530HG4 跨站脚本漏洞

The WAVLINK WN530HG4 is a wireless router from the Chinese company WAVLINK. A security vulnerability exists in WAVLINK WN530HG4 M33A8.V5030.190716 version, which stems from a security issue with the loginpage parameter...

Tenda AC10 操作系统命令注入漏洞

Tenda AC10 is a wireless router from Tenda China. An operating system command injection vulnerability exists in the Tenda AC10 USAC10V1.0RTLV15.03.06.26multiTD01 version, which stems from a remote code execution RCE vulnerability in the lanIp parameter...

The vulnerability of the saveParentControlInfo() function in the Tenda AC18 router software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the saveParentControlInfo function in the Tenda AC18 router’s microprogramming software is related to the issue where the write operation goes beyond the buffer boundaries in memory when processing the deviceId parameter. Exploiting this vulnerability can allow a malicious...

CVE-2021-43702

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

PT-2022-21068 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.9cu.5179 B20201015 Description: A stack overflow issue was discovered via the password parameter in the function FUN 00413f80. This issue affects the TOTOLINK T6 router. Recommendations: For TOTOLINK T6 version...

The vulnerability of Trendnet TEW-831DR router microprogramming software, related to the manipulation of inter-site requests, allows a hacker to perform a CSRF attack.

The vulnerability of Trendnet TEW-831DR router microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

Skipper 安全漏洞

Skipper is an HTTP router and reverse proxy for service portfolios. A security vulnerability exists in Skipper versions prior to 0.13.218, which stems from a lack of valid filter escaping for application query predicates...

The vulnerability of the “Main” function in TOTOLINK A3000RU router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the “Main” function in TOTOLINK A3000RU router microprogramming systems is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the QUERYSTRING parameter...

CVE-2022-30327

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The web interface is vulnerable to CSRF. An attacker can change the pre-shared key of the Wi-Fi router if the interface's IP address is known...

TRENDnet TEW-831DR 跨站请求伪造漏洞

The TRENDnet TEW-831DR is a router from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-831DR version 1.0 601.130.1.1356, which stems from the vulnerability of the web interface to cross-site request forgery attacks. An attacker can change the pre-shared key of a Wi-Fi router i...

TRENDnet TEW-831DR 操作系统命令注入漏洞

The TRENDnet TEW-831DR is a router from TRENDnet. A security vulnerability exists in the TRENDnet TEW-831DR version 1.0 601.130.1.1356, which originates from a system command injection vulnerability in the web interface that could allow an attacker with valid credentials to execute arbitrary shel...

CVE-2022-31845

A vulnerability in livecheck.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...

CVE-2022-31846

A vulnerability in livemfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function...

CVE-2022-31309

A vulnerability in livecheck.shtml of WAVLINK AERIAL X 1200M M79X3.V5030.180719 allows attackers to obtain sensitive router information via execution of the exec cmd function...

CVE-2022-31846

WAVLINK WN535 G3 M35G3R.V5030.180927 is affected by CVE-2022-31846 in the live_mfg.shtml page. Nuclei templates document a information-disclosure vulnerability where an attacker can obtain sensitive router information by triggering the exec cmd function, potentially exposing configuration details...

CVE-2022-31309

The vulnerability CVE-2022-31309 affects WAVLINK AERIAL X 1200M (firmware M79X3.V5030.180719). The issue resides in the live_check.shtml page where improper authorization management allows an attacker to execute the cmd function (exec cmd) and disclose sensitive router information. Affected compo...

CVE-2022-29013

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request...

H3C Magic R100 缓冲区错误漏洞

H3C Magic R100 is a router from H3C. H3C Magic R100 is vulnerable to a buffer overflow vulnerability, which can be exploited by remote attackers to submit special requests that can crash an application or execute arbitrary code in the application context...

H3C Magic R100 缓冲区错误漏洞

H3C Magic R100 is a router from H3C.A buffer overflow vulnerability exists in the H3C Magic R100 R100V100R005 version, which stems from a buffer overflow issue in the SetAPWifiorLedInfoById parameter of the /goform/aspForm page. No detailed vulnerability details are currently available...