CVE-2025-28142

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...

CVE-2025-29648

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity. TOTOLINK A3700R suffers from an access control error vulnerability that originates from improper access control of the setL2tpServerCfg function in the /cgi-bin/cstecgi.cgi file, for which no detailed...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity. The TOTOLINK A3700R suffers from an improper access control vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...

CVE-2025-29649

...

CVE-2025-29649

CVE-2025-29649 has concrete details in connected sources: Red Hat's entry describes an SQL Injection vulnerability in the TP-Link TL-WR840N router login dashboard (version 1.0), exploitable by unauthenticated attackers via the username and password fields; note that this finding is disputed and m...

Exploit for CVE-2025-29276

CVE-2025-29276 Proof of Concept PoC: In the Diagnostics tab,...

CVE-2025-28144

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function...

PT-2025-16347 · Edimax · Edimax Ac1200 Wave 2 Dual-Band Gigabit Router Br-6478Ac V3

Name of the Vulnerable Software and Affected Versions: Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 version 1.0.15 Description: A stack overflow issue was discovered in the Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 via the peerPin parameter in the formWsc function...

Edimax BR-6478AC 安全漏洞

Edimax BR-6478AC is a dual-band Gigabit router from China Xunzhou Edimax. The Edimax BR-6478AC suffers from a command execution vulnerability that originates from the groupname parameter in /boafrm/formDiskCreateGroup failing to correctly filter construct command special characters, commands, etc...

The vulnerability of the updateWifiInfo() function in TOTOLINK T8 router software allows a hacker to execute arbitrary commands.

The vulnerability of the updateWifiInfo function in TOTOLINK T8 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the serverIp parameter. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

The vulnerability in the web interface for managing Tenda FH1202 micro-program software routers allows a hacker to escalate their privileges.

The vulnerability of the web interface for managing Tenda FH1202 micro-programming software routers is related to deficiencies in access control when processing the /goform/SysToolChangePwd endpoint. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending...

CVE-2025-32380

The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. A vulnerability in Apollo Router's usage of Apollo Compiler allowed queries with deeply nested and reused named fragments to be prohibitively...

CVE-2025-32380

The CVE-2025-32380 issue affects Apollo Router Core (Rust). A vulnerability in the Router’s usage of Apollo Compiler allowed queries with deeply nested and reused named fragments to be excessively expensive to validate, triggering high resource consumption and potential denial of service. The roo...

GHSA-84M6-5M72-45FP Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow

Impact Summary A vulnerability in Apollo Router allowed certain queries to bypass configured operation limits, specifically due to integer overflow. Details The operation limits plugin uses unsigned 32-bit integers to track limit counters e.g. for a query's height. If a counter exceeded the maxim...

GHSA-75M2-JHH5-J5G2 Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragment Expansion

Impact Summary A vulnerability in Apollo Router allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically during named fragment expansion. This could lead to excessive resource consumption and denial of service. Details Named fragments...

PT-2025-15756 · Apollo · Apollo Router

Name of the Vulnerable Software and Affected Versions: Apollo Router versions prior to 1.61.2 Apollo Router versions prior to 2.1.1 Description: A vulnerability in Apollo Router's usage of Apollo Compiler allowed queries with deeply nested and reused named fragments to be prohibitively expensive ...

Tenda AC1206 缓冲区错误漏洞

Shenzhen Jixiang Tengda Technology Co., Ltd AC1206 is a high-performance wireless router designed for 200M and above broadband users. A buffer overflow vulnerability exists in the Shenzhen Jixiang Tengda Technology Company Limited AC1206. The vulnerability stems from the formfastsettingwifiset...

The vulnerability of the form_fast_setting_wifi_set function in the microprogrammed router software Tenda AC1206 allows a hacker to execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC1206 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted...

The vulnerability of the R7WebsSecurityHandler function in the microprogramming software for Tenda AC10 routers allows a hacker to induce a service failure.

The vulnerability of function R7WebsSecurityHandler in the Tenda AC10 router software is related to the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...