WAVLINK WN551K1 安全漏洞

The WAVLINK WN551K1 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN551K1 suffers from a command injection vulnerability that stems from the IP parameter of /cgi-bin/touchlistsync.cgi failing to properly filter constructed command special characters, commands, and so on...

PT-2024-10391

Name of the Vulnerable Software and Affected Versions Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC version 1.06 Description The issue concerns the request /goform/fromSetDDNS not properly handling special characters in user-provided parameters, allowing an attacker with access to the web...

CVE-2024-37664

Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic between the victim and any remote server by sending out forged TCP RST messages to evict NAT mappings in the router...

LB-LINK BL-W1210M Security Breach

LB-LINK BL-W1210M is a wireless router from China Bilink LB-LINK. A security vulnerability exists in LB-LINK BL-W1210M v2.0, which stems from incorrect access control...

PT-2024-25220 · Lb Link · Lb-Link Bl-W1210M

Name of the Vulnerable Software and Affected Versions: LB-LINK BL-W1210M version 2.0 Description: An issue in the LB-LINK BL-W1210M router allows attackers to bypass password complexity requirements and set single digit passwords for authentication. This can allow attackers to access the router v...

CVE-2024-37630

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...

TOTOLINK A3700R 安全漏洞

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the File parameter in the UploadCustomModule function failing to properly validate the length and size of the input data, which ca...

PT-2024-27107 · Totolink · Totolink Ac1200 Wireless Dual Band Gigabit Router

Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 Wireless Dual Band Gigabit Router firmware version A3100R V4.1.2cu.5247 B20211129 Description: The issue arises from the lack of input validation in the setNoticeCfg function, specifically with the NoticeUrl variable. This...

Comtrend router WLD71-T1 cross-site request forgery vulnerability

Comtrend router WLD71-T1 is a router from China Comtrend Telecom Comtrend. A cross-site request forgery vulnerability exists in Comtrend router WLD71-T1 version v2.0.201820, which stems from vulnerability to a cross-site request forgery attack that allows an attacker to force an end user to perfo...

CVE-2024-36788

Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and access sensitive communications between the router and connected devices...

PT-2024-4073 · NetGear · Netgear Wnr614

Name of the Vulnerable Software and Affected Versions: Netgear WNR614 version N300-V1.1.0.54 1.0.1 Description: The issue is related to weak password requirements in the Netgear WNR614 N300 Wi-Fi router, allowing attackers to create passwords that do not conform to defined security standards. Thi...

CVE-2024-36795

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.541.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business models RV016, RV042, RV042G, RV082, RV320, and RV325 allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web-based management interfaces for Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 lies in the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotel...

CVE-2023-30314

An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service...

Wavlink QUANTUM D2G 安全漏洞

Wavlink QUANTUM D2G is a dual-band, full-gigabit WiFi router from China-based Wavlink. A security vulnerability exists in the Wavlink QUANTUM D2G that originates from the router allowing an attacker to hijack a TCP session, which could result in a denial of service...

TOTOLINK CP900L 安全漏洞

The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK CP900L NTPSyncWithHost function, which can be exploited by an attacker to execute arbitrary commands...

H3C Magic R100 安全漏洞

H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100, H3C Magic R365, which stems from a vulnerability that allows an attacker to hijack a TCP session, which could lead to a denial of service attack...

PT-2024-12233 · 360 · 360 T6M +3

Name of the Vulnerable Software and Affected Versions: 360 V6G affected versions not specified 360 T5G affected versions not specified 360 T6M affected versions not specified 360 P1 affected versions not specified Description: An issue in the routers allows attackers to hijack TCP sessions, which...