27341 matches found
CVE-2026-1625
A vulnerability was detected in D-Link DWR-M961 1.1.47. The impacted element is the function sub4250E0 of the file /boafrm/formSmsManage of the component SMS Message. Performing a manipulation of the argument actionvalue results in command injection. The attack may be initiated remotely. The...
CVE-2020-36963
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...
CVE-2026-1601
A weakness has been identified in Totolink A7000R 4.1cu.4154. The impacted element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument FileName can lead to command injection. The attack can be launched remotely. The exploit has been made...
EUVD-2026-4953
A flaw has been found in D-Link DWR-M961 1.1.47. This vulnerability affects the function sub419920 of the file /boafrm/formLtefotaUpgradeQuectel. This manipulation of the argument fotaurl causes command injection. The attack is possible to be carried out remotely. The exploit has been published a...
D-Link DWR-M961 has a command injection vulnerability
The D-Link DWR-M961 is a router produced by D-Link Corporation. Version 1.1.47 of the D-Link DWR-M961 contains a command injection vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formLtefotaUpgradeFibocom, specifically the parameter fotaurl, which...
D-link DIR-823X Router Arbitrary Command Execution
The vulnerability of the sub41E2A0 function in the /goform/setmode function of the D-link DIR-823X router’s microprogramming system is related to the lack of measures taken to neutralize special elements during the processing of the langateway parameter. Exploiting this vulnerability allows a...
Tenda W30E Brute Force
The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a remote attacker to carry out an attack using brute-force methods...
Tenda W30E Password Change
The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E lies in the lack of necessary checks during password changes. Exploiting this vulnerability allows a remote attacker to change a user’s password...
Tenda AX3 formSetIptv Heap Buffer Overflow DoS
The vulnerability of the formSetIptv function in the Tenda AX3 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...
Tenda W30E XSS
The vulnerability of the microprogrammed wireless Wi-Fi router Tenda W30E is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...
Tenda W30E Authentication Bypass Privilege Escalation
The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...
Tenda W30E Information Disclosure
The vulnerability of the microprogrammed wireless Wi-Fi routers Tenda W30E lies in the insertion of confidential information into the transmitted data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to the protected information...
Tenda AX-1806 Sub Function DoS
The vulnerability of the sub60CFC function in the microprogramming software of the Tenda AX-1806 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failure...
Tenda AX-1803 DoS
The vulnerability of the formfastsettingwifiset function in the Tenda AX-1803 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Tenda AX-1806 Sub Process Failure
The vulnerability of the sub72290 function in the microprogramming software of the Tenda AX-1806 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
Tenda AX-1806 Sub Function DoS
The vulnerability of the sub727F4 function in the Tenda AX-1806 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
D-Link DWR-M961 has a command injection vulnerability
The D-Link DWR-M961 is a router produced by D-Link Corporation. Version 1.1.47 of the D-Link DWR-M961 contains a command injection vulnerability. This vulnerability arises from incorrect handling of the parameter fotaurl in the file /boafrm/formLtefotaUpgradeQuectel, which may lead to command...
CVE-2020-36963
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...
EUVD-2020-30886
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...
CVE-2020-36963 Intelbras Router RF 301K 1.1.2 - Authentication Bypass
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...