329 matches found
EUVD-2023-36593
Malicious code in bioql PyPI...
EUVD-2022-50458
Malicious code in bioql PyPI...
EUVD-2023-27250
Malicious code in bioql PyPI...
CVE-2025-57278
The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800B10ALKSLV01.01.02P42U1406 does not implement proper session handling. After a user authenticates from a specific IP address, the router grants access to any other client using that same IP, without requiring credentials or...
The vulnerability of the verify_gemtek_header() function in Linksys E5600 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the verifygemtekheader function in Linksys E5600 router microprogramming software is related to the use of a unstable cryptographic algorithm. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code or cause service failures...
PT-2025-36919
Name of the Vulnerable Software and Affected Versions: LB-Link BL-CPE300M AX300 4G LTE Router version BL-R8800 B10 ALK SL V01.01.02P42U14 06 Description: The LB-Link BL-CPE300M AX300 4G LTE Router does not implement proper session handling. After a user authenticates from a specific IP address, t...
CVE-2025-52054
An issue was discovered in Tenda AC8 v4.0 AC1200 Dual-band Gigabit Wireless Router AC8v4.0 Firmware 16.03.33.05. The root password of the device is calculated with a static string and the last two octets of the MAC address of the device. This allows an unauthenticated attacker to authenticate wit...
The vulnerability of the /pppoe_base.asp file of the jhttpd component of D-link DI-8100 router software allows a hacker to execute arbitrary code.
The vulnerability of the /pppoebase.asp file of the jhttpd component of D-link DI-8100 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
CVE-2025-52379
Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below contains an authenticated command injection vulnerability in the firmware update feature. The /web/umfileNameset.cgi and /web/umwebupgrade.cgi endpoints fail to properly sanitize the upgradeFileName parameter, allowing authenticated...
CVE-2025-34049
An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11X101 Build 1127.190306 and earlier. The router’s web management interface fails to properly sanitize user input in the targetaddr parameter of the formTracert and formPing administrative...
The vulnerability of the sub_415EF8 function in Netgear EX6100 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of sub415EF8 in Netgear EX6100 router microprogramming software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted GET request...
The vulnerability of the sub_41619C() function in NETGEAR EX3700 router microprogramming software allows a hacker to induce a service failure.
The vulnerability of the sub41619C function in NETGEAR EX3700 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted GET request remotely...
The vulnerability of the NAT Mapping module in TOTOLINK A3002RU software allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the NAT Mapping module in TOTOLINK A3002RU router microprogramming software is related to the lack of measures taken to protect the website structure when processing the Comment parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...
The vulnerability of the setUpgradeFW() function in TOTOLINK CA600-PoE router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the setUpgradeFW function in TOTOLINK CA600-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level when processing the FileName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the jhttpd component in D-Link DI-8100 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the jhttpd component in D-Link DI-8100 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of D-Link DI-7003GV2 router microprogramming software, related to the disclosure of information, allows a intruder to disclose confidential data.
The vulnerability of D-Link DI-7003GV2 router microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose confidential information...
The vulnerability of the Configuration Handler component in D-Link DI-7003GV2 router microprogramming software allows a hacker to disclose confidential information.
The vulnerability of the Configuration Handler component in D-Link DI-7003GV2 router microprogramming software is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formWlanRedirect file in the microprogramming system for routers A702R, A3002R, and A3002RU allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the HTTP POST Request Handler component of the /boafrm/formWlanRedirect file in the microprogramming software for routers A702R, A3002R, and A3002RU is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...
PT-2025-20904 · Unknown · Cp-Xr-De21-S
Name of the Vulnerable Software and Affected Versions: CP-XR-DE21-S -4G Router Firmware version 1.031.022 Description: The issue concerns insecure protections for the UART console, allowing local attackers to connect via a serial connection, read the boot sequence, and reveal internal system...
The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.
The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...