Acer Wave 7 router 安全漏洞

The Acer Wave 7 router is a three-band wireless router from Acer, a company based in Taiwan, China. The Acer Wave 7 router has a security vulnerability. This vulnerability allows attackers to decrypt, modify, and re-encrypt system backups, enabling persistent backdoors attacks...

Acer Predator Connect W6x 代码注入漏洞

The Acer Predator Connect W6x is a series of high-performance Wi-Fi 6/6E gaming routers produced by Acer of Taiwan, China. The Acer Predator Connect W6x has a code injection vulnerability, which stems from allowing injections and execution of arbitrary shell commands...

📄 D-Link DSL2600U Password Disclosure

D-Link DSL2600U suffers from an administrative password disclosure vulnerability. Exploit Title: D-Link DSL2600U - 'rom-0' Admin Password Disclosure Date: 2026-05-02 Exploit Author: Amir Hossein Jamshidi Vendor Homepage: https://www.dlink.com Version: DSL-2600U Tested on: ubuntu CVE : N/A Firmwar...

The vulnerability of the setLoginPasswordCfg() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the setLoginPasswordCfg function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router software is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the admpass parameter. Exploiting this vulnerability allows a...

The vulnerability of the formPing6() function in the Boa microprogramming software-based router Tenda HG9 HTTP server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPing6 function on the Boa microprogrammed software-based Tenda HG9 router’s HTTP server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the setMiniuiHomeInfoShow() function (/cgi-bin/cstecgi.cgi) in the TOTOLINK A7100RU router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setMiniuiHomeInfoShow function /cgi-bin/cstecgi.cgi of the TOTOLINK A7100RU router’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system’s processing of the laninfo parameter. Exploiting this...

The vulnerability of the sub_414BA8() function in the embedded web server of the D-Link DIR-825M router’s software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub414BA8 function in the embedded web server of the D-Link DIR-825M router’s software is related to the copying of buffer data without checking the size of the input data during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker ...

The vulnerability of the fromSafeEmailFilter() function (/goform/SafeEmailFilter) in the Tenda F451 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeEmailFilter function /goform/SafeEmailFilter in the Tenda F451 router software lies in the issue of the operation being executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the formWrlExtraSet() function (/goform/WrlExtraSet) in the Tenda F451 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formWrlExtraSet function /goform/WrlExtraSet of the Tenda F451 router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

The vulnerability of the formWrlExtraSet() function in the httpd daemon of the Tenda F456 microprogramming router allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWrlExtraSet function in the httpd daemon of the Tenda F456 microprogramming router lies in the fact that the operation escapes the buffer boundaries in memory when processing the GO parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

The vulnerability of the fromGstDhcpSetSer() function in the httpd daemon’s microprogramming software for Tenda F456 allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromGstDhcpSetSer function in the httpd daemon’s microprogramming-based router software Tenda F456 is related to the issue where operations are performed outside of the buffer in memory when processing the dips parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the sub_425A28() function (/goform/DelFil) of the Tenda 4G300 router’s microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the sub425A28 function /goform/DelFil of the Tenda 4G300 router’s microprogramming system is related to the lack of measures taken to neutralize special elements during the processing of the delflag parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the sub_4151FC() function in the embedded web server of the D-Link DIR-825M router’s software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub4151FC function in the embedded web server of the D-Link DIR-825M router’s software is related to the copying of buffer data without checking the size of the input data during the processing of the submit-url parameter. Exploiting this vulnerability allows an attacker ...

The vulnerability of the sub_4237AC() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub4237AC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause malfunctions in the device...

The vulnerability of the sub_462590() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub462590 function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the formWlanSetup() function in Tenda HG9 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWlanSetup function in the Tenda HG9 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the Tenda F451 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function /goform/P2pListFilter in the Tenda F451 router software relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

CVE-2026-44593

esm.sh is a no-build content delivery network CDN for web development. In 137 and earlier, the legacy router first retrieves a response from legacyServer, parses the incoming request path, and ultimately writes the data to storage via buildStorage.Put. The router concatenates the path components...

CVE-2026-24444 SDMC NE6037 Hardcoded Password via mgmt.php/npcmd.php

SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9B9 contain a hardcoded password vulnerability in the web management interface recovery endpoints mgmt.php, npcmd.php that allows unauthenticated attackers to gain root access by submitting the hardcoded credential to the...

CVE-2026-44593 esm.sh: Legacy Route Path Traversal Can Lead to RCE

esm.sh is a no-build content delivery network CDN for web development. In 137 and earlier, the legacy router first retrieves a response from legacyServer, parses the incoming request path, and ultimately writes the data to storage via buildStorage.Put. The router concatenates the path components...