The vulnerability of the formPPPoESetup() function in the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX BR-6478AC routers lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

The vulnerability of the set_local_time_0() function in Tenda W12 software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setlocaltime0 function in Tenda W12 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the formUSBFolder() function in the microprogramming router EDIMAX BR-6478AC allows a hacker to execute arbitrary code.

The vulnerability of the formUSBFolder function in the microprogramming-based router EDIMAX BR-6478AC lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the formWanTcpipSetup() function in the microprogramming software for the router EDIMAX BR-6478AC allows a hacker to execute arbitrary code.

The vulnerability of the formWanTcpipSetup function in the microprogramming software for the EDIMAX BR-6478AC router lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the formWPS() function in TRENDnet TEW-432BRP router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWPS function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the formSetUrlFilter() function in TRENDnet TEW-432BRP router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetUrlFilter function in TRENDnet TEW-432BRP router software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the formSysCmd() function in TRENDnet TEW-432BRP router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSysCmd function in TRENDnet TEW-432BRP router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the cgiWifiMacFilterSet() function in the Tenda W12 router’s microprogramming software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the cgiWifiMacFilterSet function in the microprogramming-based router software of Tenda W12 lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the cgiSysTimeInfoSet() function in the Tenda W12 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the cgiSysTimeInfoSet function in the Tenda W12 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the formUSBAccount() function in the microprogramming router EDIMAX BR-6478AC allows a hacker to execute arbitrary code.

The vulnerability of the formUSBAccount function in the microprogramming-based router EDIMAX BR-6478AC lies in the fact that the operation’s output escapes the buffer and is stored in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the cgiSysWebTimeoutSet() function in the Tenda W12 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the cgiSysWebTimeoutSet function in the Tenda W12 router’s microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the formWlanSetup() function in TRENDnet TEW-432BRP router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWlanSetup function in TRENDnet TEW-432BRP router software lies in the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-34077: Allocation of Resources Without Limits or Throttling

React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Components RSC APIs, there is a potential client-side Cross-Site Scripting XSS vulnerability in the RSC redirect handling if redirects come from untrusted sources. This does not...

PT-2026-45828

Name of the Vulnerable Software and Affected Versions React Router versions 7.7.0 through 7.13.1 React Router versions prior to 7.14.0 Remix versions 2.9.0 and later Description Two distinct issues were identified. First, a client-side Cross-Site Scripting XSS flaw exists in the handling of...

react-router 跨站脚本漏洞

react-router is a declarative routing library for React, open-sourced by Remix. Versions of react-router from 7.5.1 to 7.13.1 have a cross-site scripting vulnerability. This vulnerability stems from improper handling of the HTTP Location header value in framework mode with pre-rendering enabled,...

CVE-2026-33244: Improper Neutralization of Input During Web Page Generation

React Router is a router for React. In versions 7.5.1 through 7.13.1, when using Framework Mode with pre-rendering enabled, improper neutralization of the HTTP Location header value can permit Cross-Site Scripting XSS in the statically generated HTML files if the redirect location comes from an...

CVE-2026-40181: URL Redirection to Untrusted Site

React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the redirect function can trigger an open redirect to an external domain due to path values starting with // being reinterpreted as protocol-relative URLs. The level of impact...

CVE-2026-42211: Deserialization of Untrusted Data

React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could potentially allow unauthorized remote code execution RCE through external requests. This attack requires the application code to have an existing prototype pollution...

react-router 输入验证错误漏洞

react-router is a declarative routing library for React, open-sourced by Remix. There were input validation vulnerabilities in the versions of react-router from 7.0.0 to 7.14.0, and from 6.7.0 to 6.30.3. These vulnerabilities stemmed from the fact that path values starting with “//” were...

react-router 代码问题漏洞

react-router is a declarative routing library for React, open-sourced by Remix. From version 7.0.0 to 7.14.1 of react-router, there are code-related vulnerabilities. These vulnerabilities stem from the possibility of unauthorized remote code execution through external requests under framework mod...