The vulnerability of the formdeleteUserName() function in the Tenda CH22 router software allows a hacker to cause a service failure.

The vulnerability of the formdeleteUserName function in the Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the oldaccount parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

CVE-2025-8231

A vulnerability, which was classified as critical, has been found in D-Link DIR-890L up to 111b04. This issue affects some unknown processing of the file rgbin of the component UART Port. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the physical device...

Tenda AC10 安全漏洞

Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tenda Technology Co., Ltd, which is mainly for 200M and above fiber optic users, supports Wi-Fi 5 technology standard, and provides dual-band concurrent transmission. The Tenda AC10 suffers from a buffer overflow...

TOTOLINK A702r 安全漏洞

TOTOLINK A702r is a router device from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A702r version 4.0.0-B20230721.1521, which originates from a buffer overflow due to incorrect manipulation of the parameter servicetype in the file /boafrm/formPortFw in the HTTP...

TOTOLINK A702R 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from improper handling of the mac parameter in the...

Tenda FH451 formNatStaticSetting function buffer overflow vulnerability

Tenda FH451 is a single-band 2.4GHz SOHO wireless router launched by China Tenda, with a maximum transmission rate of 450Mbps, belonging to the series of products of the King of Wall Penetration. Tenda FH451 has a buffer overflow vulnerability, the vulnerability stems from the parameter page in t...

The vulnerability of the fromPptpUserAdd() function in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the fromPptpUserAdd function in the Tenda FH451 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries into memory when processing the username parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the setparentcontrolinfo() function in Tenda AC6 router software allows a hacker to trigger a service failure.

The vulnerability of the setparentcontrolinfo function in Tenda AC6 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the formSetWanDhcpplus() function in D-Link DIR-513 router software allows a hacker to induce a service failure.

The vulnerability of the formSetWanDhcpplus function in the microprogramming software for D-Link DIR-513 is related to the operation of writing data outside of the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacker to cause a servic...

The vulnerability of the ssdpcgi_main() function (/htdocs/cgibin) in the ssdpcgi component of D-Link DIR-645 router microprogramming software, allowing a hacker to execute arbitrary commands

The vulnerability of the ssdpcgimain function /htdocs/cgibin of the ssdpcgi component in the D-Link DIR-645 router microprogramming system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the formLanSetupRouterSettings() function in D-Link DIR-513 router microprogramming software, a built-in web server, allows a hacker to cause a service failure.

The vulnerability of the formLanSetupRouterSettings function in the embedded web server of D-Link’s DIR-513 router software is related to the issue where data is written out of the buffer into memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacke...

The vulnerability of the menu_nat_more_asp() function in the D-Link DI-8100 router microprogramming software, which allows a hacker to cause a service failure

The vulnerability of the menunatmoreasp function in D-link DI-8100 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

Shenzhen Libituo Technology LBT-T300-T310 安全漏洞

Shenzhen Libituo Technology LBT-T300-T310 is an industrial router from Shenzhen Libituo Technology China. A security vulnerability exists in the Shenzhen Libituo Technology LBT-T300-T310 version 2.2.3.6, which is caused by a buffer overflow due to a misbehavior of the function sub40B6F0 in the fi...

TOTOLINK T6 注入漏洞

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. TOTOLINK T6 suffers from a command injection vulnerability that originates from the function ckeckKeepAlive in the file wireless.so failing to properly filter...

UTT HiPER 840G aspApBasicConfigUrcp File Buffer Overflow Vulnerability

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

D-Link DIR-817L 命令注入漏洞

D-Link DIR-817L is a home-grade dual-band wireless router from D-Link that supports IEEE 802.11ac standard with dual-band concurrency 2.4GHz/5GHz and a maximum wireless transmission rate of 750Mbps. A command injection vulnerability exists in the D-Link DIR-817L, which stems from the failure of t...

D-Link DIR-645 Command Injection Vulnerability

D-Link DIR-645 is a Gigabit wireless router for home and SMB users launched by D-Link in 2012. The D-Link DIR-645 suffers from a command injection vulnerability that stems from the failure of the file /htdocs/cgibin function ssdpcgimain in the component ssdpcgi to correctly filter constructed...

Netgear RAX30 安全漏洞

The NETGEAR RAX30 is a dual-band wireless router from NETGEAR. A security vulnerability exists in Netgear RAX30 version V1.0.10.94, which can be exploited by an attacker to potentially cause remote code execution...

CVE-2025-53757

This vulnerability exists in Digisol DG-GR6821AC Router due to misconfiguration of both Secure and HttpOnly flags on session cookies associated with the router web interface. A remote attacker could exploit this vulnerability by capturing the session cookies transmitted over an unsecure HTTP...

CVE-2025-53756

This vulnerability exists in Digisol DG-GR6821AC Router due to cleartext transmission of credentials in its web management interface. A remote attacker could exploit this vulnerability by intercepting the network traffic and capturing cleartext credentials. Successful exploitation of this...