Lucene search
+L

23663 matches found

Nuclei
Nuclei
added yesterday86 views

WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure

WAVLINK WN579 X3 M79X3.V5030.180719 is susceptible to information disclosure in /cgi-bin/ExportAllSettings.sh. An attacker can obtain sensitive router information via a crafted POST request and thereby possibly obtain additional sensitive information, modify data, and/or execute unauthorized...

7.5CVSS7.4AI score0.06037EPSS
SaveExploits1References4
Nuclei
Nuclei
added yesterday37 views

Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion

Razer Sila Gaming Router 2.0.441api-2.0.418 is vulnerable to local file inclusion which could allow attackers to read arbitrary files. id: CVE-2022-29014 info: name: Razer Sila Gaming Router 2.0.441api-2.0.418 - Local File Inclusion author: edoardottt severity: high description: Razer Sila Gaming...

7.5CVSS7.3AI score0.113EPSS
SaveExploits1References5
Nuclei
Nuclei
added yesterday34 views

TotoLink Router setPortForwardRules - Command Injection

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortForwardRules function. id: CVE-2024-24329 info: name: TotoLink Router setPortForwardRules - Command Injection author: pussycat0x severity: critical description...

9.8CVSS7.7AI score0.06172EPSS
SaveExploits1References1
Nuclei
Nuclei
added yesterday180 views

Telesquare TLR-2005KSH - Remote Command Execution

Telesquare Tlr-2005Ksh is a Sk Telecom Lte router from South Korea's Telesquare company.Telesquare TLR-2005Ksh versions 1.0.0 and 1.1.4 have an unauthorized remote command execution vulnerability. An attacker can exploit this vulnerability to execute system commands without authorization through...

8.8CVSS6.4AI score0.05848EPSS
SaveExploits8References5
Nuclei
Nuclei
added yesterday33 views

Netgear R6850 - Information Disclosure

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the currentsetting.htm page.This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as firmware version, model details,...

7.5CVSS5.5AI score0.01923EPSS
SaveExploits1References3
Nuclei
Nuclei
added yesterday83 views

Netgear R6850 - Information Disclosure

Netgear R6850 router firmware version V1.1.0.88 contains an information leakage vulnerability in the debuginfo.htm page. This hidden interface is not protected by authentication, allowing unauthenticated attackers to access sensitive informationsuch as product model name, WAN connection type, and...

5.3CVSS5.5AI score0.01231EPSS
SaveExploits1References2
Nuclei
Nuclei
added yesterday68 views

Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion

Zyxel VMG1312-B10D 5.13AAXA.8 is susceptible to local file inclusion. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences /../, conduct directory traversal attacks, and view arbitrary files. id: CVE-2018-19326 info: name: Zyxel VMG1312-B10D...

7.5CVSS6.9AI score0.09759EPSS
SaveExploits1References5
Nuclei
Nuclei
added yesterday19 views

TOTOLINK/Realtek Routers - Information Disclosure

A certain router administration interface using Realtek APMIB e.g., on TOTOLINK models allows unauthenticated remote attackers to disclose the entire router configuration, including sensitive credentials, via accessing the "config.dat" file. Affected devices include TOTOLINK A3002RU through 2.0.0...

7.5CVSS7.2AI score0.08669EPSS
SaveExploits4References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago4 views

Malicious code in @servicetitan/hash-browser-router (npm)

npm/@servicetitan/hash-browser-router is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

5.9AI score
SaveExploits0References12
Nuclei
Nuclei
added 2 days ago85 views

Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass

Zyxel NBG2105 V1.00AAGU.2C0 devices are susceptible to authentication bypass vulnerabilities because setting the login cookie to 1 provides administrator access. id: CVE-2021-3297 info: name: Zyxel NBG2105 V1.00AAGU.2C0 - Authentication Bypass author: gy741 severity: high description: Zyxel NBG21...

7.8CVSS7.2AI score0.20514EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2 days ago85 views

Razer Sila Gaming Router - Remote Code Execution

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request. id: CVE-2022-29013 info: name: Razer Sila Gaming Router - Remote Code Execution author: DhiyaneshDK severity: critical descriptio...

9.8CVSS8.1AI score0.77136EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2 days ago45 views

D-Link DIR-868L/817LW - Information Disclosure

D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers are vulnerable to information disclosure vulnerabilities because certain web interfaces do not require authentication. An attacker can get the router's username and password and other information via a DEVICE.ACCOUNT value for SERVICES in...

10CVSS7.5AI score0.57298EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2 days ago64 views

Wavlink WN535K2/WN535K3 - OS Command Injection

Wavlink WN535K2 and WN535K3 routers are susceptible to OS command injection which affects unknown code in /cgi-bin/nightled.cgi via manipulation of the argument starthour. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised syste...

9.8CVSS7.8AI score0.79513EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2 days ago72 views

TP-Link - OS Command Injection

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a specially crafted payload in an IP address input field. id: CVE-2021-41653 info: name: TP-Link - OS Command Injection author: gy741 severity: critical...

10CVSS8.7AI score0.75883EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2 days ago61 views

TP-Link TL-WR840N - Command Injection

The TP-Link TL-WR840NESV6.20180709 router contains a command injection vulnerability in the oalsetIp6DefaultRoute component. This vulnerability allows authenticated attackers to execute arbitrary system commands, leading to complete device compromise. id: CVE-2022-25061 info: name: TP-Link...

9.8CVSS7.5AI score0.58431EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2 days ago55 views

NETGEAR WNAP320 Access Point Firmware - Remote Command Injection

NETGEAR WNAP320 Access Point Firmware version 2.0.3 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2016-1555 info: name: NETGEAR WNAP320 Access Point Firmware - Remote Command Injection author: gy741 severity: critical...

10CVSS7.8AI score0.98325EPSS
SaveExploits5References5
OSV
OSV
added 2 days ago5 views

ROOT-APP-NPM-CVE-2026-33245 CVE-2026-33245 in react-router - Patched by Root

Root has patched CVE-2026-33245 in the react-router package for Root:npm. Multiple fixed versions available...

8CVSS7.4AI score0.00188EPSS
SaveExploits0
OSV
OSV
added 2 days ago6 views

ROOT-APP-NPM-CVE-2026-34077 CVE-2026-34077 in react-router - Patched by Root

Root has patched CVE-2026-34077 in the react-router package for Root:npm. Multiple fixed versions available...

7.5CVSS5.4AI score0.00294EPSS
SaveExploits0
OSV
OSV
added 2 days ago6 views

ROOT-APP-NPM-CVE-2026-42342 CVE-2026-42342 in react-router - Patched by Root

Root has patched CVE-2026-42342 in the react-router package for Root:npm. Multiple fixed versions available...

7.5CVSS5.4AI score0.00299EPSS
SaveExploits0
OSV
OSV
added 2 days ago5 views

ROOT-APP-NPM-CVE-2026-40181 CVE-2026-40181 in react-router - Patched by Root

Root has patched CVE-2026-40181 in the react-router package for Root:npm. Multiple fixed versions available...

8.7CVSS5.5AI score0.00162EPSS
SaveExploits0
Rows per page
Query Builder