Tenda WH450 HTTP Request Handler Data Compromise

The vulnerability of the HTTP Request Handler component in the Tenda WH450 microprogramming-based router software lies in the issue of data being written outside of the buffer during the processing of the page parameter. Exploiting this vulnerability allows an attacker to compromise the...

Tenda AX1806 Subroutine Buffer Overflow DoS

The vulnerability of the sub65A28 function in the Tenda AX1806 router’s microprogramming system is related to the operation of writing data outside the buffer in memory when processing the parameter serviceName. Exploiting this vulnerability can allow an attacker to cause a service failure remote...

UTT 520W strcpy Heap Buffer Overflow DoS

The vulnerability of the strcpy function in the UTT 520W router software lies in the fact that the operation’s output goes beyond the buffer boundaries during the processing of the ssid parameter. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Tenda AX1806 Sub 65B5C Function DoS

The vulnerability of the sub65B5C function in the Tenda AX1806 router’s microprogramming system is related to the operation of writing data outside the buffer in memory when processing the wanSpeed parameter. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Tenda AX3 DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the fact that the operation’s results are stored outside of the buffer in memory when processing the mac2 parameter. Exploiting this vulnerability could allow an attacker to cause a service failur...

Tenda AX3 DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the cloneType2 parameter. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda AX1806 fromSetSysTime DoS

The vulnerability of the fromSetSysTime function in Tenda AX1806 router microprogramming software is related to buffer overflow when processing the timeZone parameter. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted request...

CVE-2026-1125

CVE-2026-1125 affects D-Link DIR-823X router firmware 250416. The issue resides in the sub_412E7C function within /goform/set_wifidog_settings; manipulating the wd_enable parameter can trigger a remote command injection. Public exploitation appears to be available. Connected sources corroborate t...

CVE-2026-1125

A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...

D-Link DIR-823X command injection vulnerability

The D-Link DIR-823X is a wireless router produced by D-Link Corporation. The D-Link DIR-823X 250416 version has a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter “wdenable” in the file/goform/setwifidogsettings, which may lead to command injectio...

CVE-2021-47820

CVE-2021-47820 affects the Ubee EVW327 router. The vulnerability is a cross-site request forgery that enables remote access by a crafted page that auto-submits a form to change remote access settings to port 8080 without user consent. The provided documents do not specify affected firmware versio...

CVE-2021-47820 Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent...

CVE-2025-65349

A Stored Cross-Site Scripting XSS vulnerability in Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to execute arbitrary scripts via a crafted payload due to unsanitized repeater AP SSID value when is displayed in any page at...

EUVD-2026-3094

Malicious code in sparkling-router npm...

Malicious code in sparkling-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22829b6f6507a82b0a8acae51ea2b4cc5034afde231740f3eaede5e0af3a0fac The package sparkling-router was found to contain malicious code. Source: ghsa-malware 6e84c7e51a68544e8af8935aa539926a2bc3d269e42c78c99a3765e76c5477...

MAL-2026-311 Malicious code in sparkling-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22829b6f6507a82b0a8acae51ea2b4cc5034afde231740f3eaede5e0af3a0fac The package sparkling-router was found to contain malicious code. Source: ghsa-malware 6e84c7e51a68544e8af8935aa539926a2bc3d269e42c78c99a3765e76c5477...

PT-2026-3320

Name of the Vulnerable Software and Affected Versions Skipper versions prior to 0.23.0 Description Skipper is an HTTP router and reverse proxy for service composition. The default configuration before version 0.23.0, specifically -lua-sources=inline,file, allowed untrusted users to create Lua...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001099)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001099 advisory. The fib6addrt2node function in net/ipv6/ip6fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement RA messages in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001075)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001075 advisory. The ip6routeadd function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to caus...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000991)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000991 advisory. net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers t...