26775 matches found
CVE-2026-94543: Use of Cache Containing Sensitive Information
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry without sufficiently binding it to the...
Linux Distros Unpatched Vulnerability : CVE-2026-94543
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router wit...
CVE-2025-9090
CVE-2025-9090 Author: Byte Reaper Description This exploit targets CVE-2025-9090 , a command injection vulnerability in the Tenda AC20 v16.03.08.12 router. The flaw is in the endpoint /goform/telnet, which can be triggered remotely. When accessed, it starts the Telnet service on the device, openi...
CVE-2023-20198-Fix
CVE-2023-20198-Fix This repository contains an Ansible playbook for remediating the CVE-2023-20198 vulnerability found in certain Cisco devices. It does the following: 1. Checks if the web service is running on the router by checking for the associated commands in the running config 2. Disables t...
CVE-2026-75604
CVE-2026-75604 RCE PoC Python-концепт-доказательство для CVE-2026-75604 — неаутентифицированное удалённое выполнение команд в приложениях Next.js, размещённых на Windows, которые используют одновременно Pages Router и App Router без Cache Components. Демонстрация Требования Next.js =13.4 =16.0...
CVE-2026-75604-poc
CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-75604, an unauthenticated remote command execution vulnerability in Windows-hosted Next.js applications that use both the Pages Router and App Router without Cache Components. Demonstration Requirements Next.js =13.4 =16.0 16.3.3 Native...
CVE-2020-29669
=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...
CVE-2024-12856
CVE-2024-12856 Это эксплойт для маршрутизаторов Four-Faith моделей F3x24 и F3x36, позволяющий получить reverse shell. «Маршрутизаторы Four-Faith моделей F3x24 и F3x36 подвержены уязвимости внедрения команд операционной системы OS. По крайней мере, версия прошивки 2.0 позволяет аутентифицированным...
CVE-2026-36958
CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...
CVE-2026-36957
CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Server CVE ID: CVE-2026-36957 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Product: Dbit Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The...
CVE-2026-36956
CVE-2026-36956: Cross-Site Request Forgery CSRF in Web Management Interface CVE ID: CVE-2026-36956 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Product: Dbit Router Firmware Version: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Descripti...
CVE-2026-36960
CVE-2026-36960: Cross-Site Request Forgery CSRF in Web Management Interface CVE ID: CVE-2026-36960 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF Description The U-SPEED Router firmware...
CVE-2026-36959
CVE-2026-36959: Missing Rate Limiting on Login Endpoint CVE ID: CVE-2026-36959 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-307 - Improper Restriction of Excessive Authentication Attempts Description The U-SPEED Router...
fracture
Fracture FragAttacks WiFi Penetration Framework CVE-2020-24586 / CVE-2020-24587 / CVE-2020-24588 Fracture automates three novel attack chains via 802.11 frame injection. It exploits the A-MSDU aggregation vulnerability in WPA2/WPA3 to inject arbitrary plaintext frames into encrypted networks —...
dlink-dir-819-dos
CVE-2022-40946 Exploit: Unauthenticated Denial of Service in DLink consumer DIR 819 A1 routers Exploit Fetch the sources $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Run the exploit $ ./exploit.py -i 192.168.0.1 + DLink...
CVE-2022-30024
CVE-2022-30024 Tplink wr841 v10 rce exploit ⚠️ Disclaimer The code in this repository is provided as-is for educational and defensive security research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any misuse, damage, or legal...
CVE-2026-96515
CVE-2026-96515: выполнение команды от имени root с аутентификацией в Netlink HG323RW Аутентифицированный ограниченный веб-пользователь может загрузить shell-скрипт через обработчик импорта диагностики Netlink HG323RW, и процесс BOA с UID-0 выполнит его. Требуются аутентификация и действительные...
Routeglass
Routeglass - High speed Router & Network Appliance Fingerprinting Tool Routeglass is a fast, multi-threaded router fingerprinting tool written in Go. The goal of the project is simple: identify web-exposed routers, firewalls, gateways, and embedded network devices by fingerprinting HTTP responses...
React-Router-CVE-2025-61686-
CVE-2025-61686 Vulnerability Analysis Report Vulnerability Overview CVE ID : CVE-2025-61686 Affected Versions : @react-router/node 7.0.0 to 7.9.3 Vulnerability Type : Path Traversal / Directory Traversal Vulnerability Principle 1. Vulnerability Location The vulnerability exists in the getFile...