The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger a memory buffer overflow.

The vulnerability of TP-Link Archer AX10 router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to trigger a memory buffer overflow...

The vulnerability of NETGEAR RAX30 router microprogramming software, related to the use of strictly encrypted login credentials, allows a hacker to gain full access to the system.

The vulnerability of NETGEAR RAX30 router microprogramming software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the system...

The vulnerability of D-Link DSL-3782 router’s microprogramming software allows a hacker to bypass the authentication process and gain access to confidential information.

The vulnerability of the D-Link DSL-3782 router’s microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to confidential information through a specially crafted...

The vulnerabilities of D-Link DIR-550A and DIR-604M router microprogramming software allow attackers to enhance their privileges.

The vulnerability of D-Link DIR-550A and DIR-604M router microprogramming software is related to insecure resource initialization. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

H3C Magic R300 缓冲区错误漏洞

The H3C Magic R300 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R300 R300-2100MV100R004 firmware version, which originates from the DelDNSHnList interface of /goform/aspForm contains a stack overflow...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microsoftware allows a attacker to execute arbitrary code.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the LocalIPAddress parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

The vulnerability of Netgear SRX5308 router microprogramming software, related to improper release of resources, allows a hacker to trigger a service failure.

The vulnerability of Netgear SRX5308 micro-programmed software routers is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Nanoleaf firmware 信任管理问题漏洞

Nanoleaf firmware is a router firmware from Nanoleaf. A trust management issue vulnerability exists in Nanoleaf firmware version 7.1.1 and prior versions, which stems from a missing SSL certificate. An attacker could exploit this vulnerability to execute arbitrary code via a DHCP hijacking attack...

Arris Router Firmware 9.1.103 - Remote Code Execution (Authenticated) Exploit

Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution RCE Authenticated Exploit Author: Yerodin Richards Vendor Homepage: https://www.commscope.com/ Version: 9.1.103 Tested on: TG2482A, TG2492, SBG10 CVE : CVE-2022-45701 import requests import base64 routerhost = "http://192.168.0....

CVE-2023-23150

SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution...

Code injection

SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution...

Command injection

Command execution vulnerability was discovered in JHR-N916R router firmware version=21.11.1.1483...

CVE-2023-23150

SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution...

CVE-2021-37316

SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view sensitive information via /etc/shadow...

CVE-2021-37316

CVE-2021-37316 affects ASUS RT-AC68U routers with Cloud Disk in firmware

CVE-2021-37317

CVE-2021-37317 affects ASUS RT-AC68U router firmware prior to 3.0.0.4.386.41634. The vulnerability is a directory traversal in Cloud Disk that allows remote attackers to write arbitrary files via improper sanitation during COPY and MOVE operations. Root cause: insufficient input sanitization in t...

Improper access control

COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control...

Design/Logic Flaw

COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts...

PT-2023-15461 · Comfast · Comfast Cf-Wr623N

Name of the Vulnerable Software and Affected Versions: COMFAST CF-WR623N Router firmware version V2.3.0.1 Description: The issue is related to Cross Site Scripting XSS via the URL filtering feature in the router. This means an attacker could potentially inject malicious scripts into the website,...

The vulnerability of D-Link DIR-823G router microprogramming software, related to the lack of measures taken to clean data at the control level, allows a hacker to execute arbitrary commands.

The vulnerability of the microprogrammed software of D-Link DIR-823G routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...