2317 matches found
TOTOLINK EX1200T 安全漏洞
The TOTOLINK EX1200T is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates in the file /boafrm/formReflashClientTbl in the HTTP POST Request Handler component, which can be exploited by an attacker to execute...
Tenda AC18 /goform/setPptpUserList Buffer Overflow Vulnerability
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from a misuse of the parameter list in the file /goform/setPptpUserList, which can be exploited by an attacker to submit a special request and execute arbitrary...
CVE-2025-5863
A vulnerability was found in Tenda AC5 15.03.06.47. It has been classified as critical. Affected is the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to launch the attack remotely. T...
The vulnerability of the wirelessApcli_5g() function (/goform/wirelessApcli_5g) in D-Link DIR-816 router software allows a hacker to cause a service failure.
The vulnerability of the wirelessApcli5g function /goform/wirelessApcli5g of the D-Link DIR-816 router’s software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the formWifiBasicSet() function in the Tenda AC9 v1.0 microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formWifiBasicSet function in the Tenda AC9 v1.0 microprogramming-based router software is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a service failure by sending a specially...
AUO DIR-605L and AUO DIR-816L Hardcoded Vulnerabilities
AUO DIR-605L is the first cloud router, mainly for home and small office network environments. AUO DIR-816L is a dual-band wireless router that supports 2.4GHz and 5GHz bands , and is compliant with network standards such as IEEE 802.11ac and IEEE 802.11n, with a maximum transmission rate of...
TOTOLINK X2000R 注入漏洞
TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from incorrect manipulation of the parameter devicemac1, no details of the vulnerability are provided at this time...
TOTOLINK A3002RU 安全漏洞
TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the IP Port Filtering Page component parameter Comment,...
TOTOLINK X2000R 注入漏洞
TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from the parameter peerRptPin failing to correctly filter constructed command special characters, commands, and so on. No details of the...
The vulnerability of the sys_login function in the /cgi-bin/login.cgi script of the WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3, and WL-WN576K1 routers allows a hacker to execute arbitrary code.
The vulnerability of the syslogin function in the /cgi-bin/login.cgi script of the WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3, and WL-WN576K1 routers is related to the copying of buffers without checking the size of the input data during the processing of the loginpage...
The vulnerability in the cstecgi.cgi microprogramming software for Totolink-A810R allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the cstecgi.cgi microprogramming system for Totolink-A810R routers is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the msg_process() function in TOTOLINK CA300-PoE router microprogramming software allows a intruder to execute arbitrary commands.
The vulnerability of the msgprocess function in TOTOLINK CA300-PoE router microprogramming systems is related to the lack of measures taken at the control level during the processing of the Port parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...
The vulnerability of the CloudSrvUserdataVersionCheck() function in TOTOLINK CA600-PoE router’s software allows a hacker to execute arbitrary commands.
The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CA600-PoE router’s software lies in the lack of measures taken at the control level during the processing of the magicid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...
Tenda W18E 访问控制错误漏洞
Tenda W18E is a wireless router from Tenda China. A security vulnerability exists in the Tenda W18E version v.2.0 v.16.01.0.11, which originates from the Account Module Edit function and could lead to an attacker executing arbitrary code...
The vulnerability of the SSH protocol implementation in D-Link DWR-M972V router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the SSH protocol implementation in D-Link DWR-M972V router microprogramming devices lies in the possibility of resetting settings to their factory defaults due to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-5146
CVE-2025-5146 affects Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 (up to 20250508). The vulnerability resides in the passwd_set function of /usr/bin/routerd within the HTTP Header Handler, where manipulation of the pwd argument enables remote command injection. The e...
PT-2025-23510 · Linksys · Linksys Re9000 +5
Name of the Vulnerable Software and Affected Versions: Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...
CVE-2024-28325
Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings...
CVE-2024-25852
Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights...