CVE-2025-55423

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

@fastify/express vulnerable to Improper Handling of URL Encoding (Hex Encoding)

Summary A security vulnerability exists in @fastify/express where middleware registered with a specific path prefix can be bypassed using URL-encoded characters e.g., /%61dmin instead of /admin. While the middleware engine fails to match the encoded path and skips execution, the underlying Fastif...

CVE-2026-1156

A vulnerability was determined in Totolink LR350 9.3.5u.6369B20220309. Affected by this issue is the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ssid causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

UTT 520W strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the microprogrammed routing device UTT 520W is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted POST...

UTT 520W strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the microprogrammed routing device UTT 520W is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted POST...

TOTOLINK LR350 Router Command Execution

The vulnerability of the setTracerouteCfg function in TOTOLINK LR350 router microprogramming software is related to the lack of measures taken to clean up data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

UTT 520W Router strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in the /goform/formTaskEdit file of the UTT 520W microprogramming router software is related to the escape of the operation beyond the buffer in memory when processing the selDateType parameter. Exploiting this vulnerability could allow a remote attacker t...

UTT 520W strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the UTT 520W router microprogramming system is related to the output of the operation being sent out of the buffer into memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted POST...

HiPER 810 strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the HiPER 810 router’s microprogramming software is related to the operation that occurs outside the buffer during the processing of the passwd1 parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a speciall...

TOTOLINK LR350 Router DoS

The vulnerability of the setWizardCfg function in TOTOLINK LR350 router microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter ssid. Exploiting this vulnerability allows an attacker to cause a service failure by...

UTT 520W Router strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in the /goform/formPptpClientConfig file of the UTT 520W router microprogramming system is related to the issue where the operation’s output escapes the buffer and is stored in memory when processing the EncryptionMode parameter. Exploiting this...

VulnCheck KEV: CVE-2024-57040

TP-Link TL-WR845N devices with firmware TL-WR845NUNV4200909 and TL-WR845NUNV4190219 was discovered to contain a hardcoded password for the root account which can be obtained by analyzing downloaded firmware or via a brute force attack through physical access to the router. NOTE: The supplier has...

CVE-2025-55423: Improper Control of Generation of Code

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

CVE-2025-55423

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

MiracleLinux 7 : containernetworking-plugins-0.8.3-3.el7 (AXSA:2020-186:02)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-186:02 advisory. containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters CVE-2020-10749 Tenable has extracted the preceding description...

MiracleLinux 9 : frr-8.3.1-5.el9.2.ML.1 (AXSA:2023-6435:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6435:05 advisory. frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router CVE-2023-38802 Tenable has extracted the preceding...

CVE-2026-1125

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...

CVE-2026-22031

@fastify/middie is the plugin that adds middleware support on steroids to Fastify. A security vulnerability exists in @fastify/middie prior to version 9.1.0 where middleware registered with a specific path prefix can be bypassed using URL-encoded characters e.g., "/%61dmin" instead of "/admin"...

CVE-2026-1158

A security flaw has been discovered in Totolink LR350 9.3.5u.6369B20220309. This vulnerability affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. Performing a manipulation of the argument ssid results in buffer overflow. The attack can be...

CVE-2026-1157 Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow

A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...