📄 FreeBSD rtsold 15.x Remote Code Execution

rtsold8 on FreeBSD processes IPv6 Router Advertisement DNSSL options without validating domain names for shell metacharacters. The decoded domains are passed to resolvconf8, a shell script that uses unquoted variable expansion, enabling command injection via substitution. Exploit Title: FreeBSD...

CVE-2025-15471 TRENDnet TEW-713RE formFSrvX os command injection

A vulnerability was detected in TRENDnet TEW-713RE 1.02. The impacted element is an unknown function of the file /goformX/formFSrvX. The manipulation of the argument SZCMD results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The...

CVE-2026-0640

A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could ...

CVE-2026-0640

CVE-2026-0640 affects Tenda AC23 firmware 16.03.07.52. The vulnerability resides in the sscanf usage of /goform/PowerSaveSet where tampering with the Time argument can cause a buffer overflow. Exploitation can be remote, and public PoC/exploit information exists. Affected component: the PowerSave...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration in the SFTP access control process. An attacker can maintain unauthorized access to files by remaining connected to SFTP after their permissions have been revoked or after the game server has been deleted...

Multi-Router Looking Glass Heap Buffer Overflow

The vulnerability of the Multi-Router Looking Glass MRLG software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Synology Router Manager NTP Region Command Execution

The vulnerability of the NTP Region component of the operating system used to manage Synology Router Manager devices is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

UTT 512W strcpy() Code Execution

The vulnerability of the strcpy function in the UTT 512W router microprogramming system is related to copying buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted POST request...

router LB-Link BL-CPE300M XSS

The vulnerability of the web interface of the microprogramming software-based router LB-Link BL-CPE300M is related to the lack of measures taken to protect the web page structure when processing the cmd parameter. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

Synology Router Manager Arbitrary Command Execution

The vulnerability of the VPN Settings component of the operating system used to manage Synology Router Manager relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Synology Router Manager DDNS Record Command Execution

The vulnerability of the DDNS Record component of the operating system used to manage Synology Router Manager devices relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

jd Tenda AC20 DoS

The vulnerability of the /goform/WifiExtraSet file in the microprogramming router jd Tenda AC20 is related to the issue where an operation goes beyond the buffer boundaries in memory when processing the mac parameter. Exploiting this vulnerability can allow a remote attacker to cause a service...

EUVD-2026-0903

A vulnerability was determined in Tenda AC1206 15.03.06.23. Affected by this issue is the function formBehaviorManager of the file /goform/BehaviorManager of the component httpd. Executing a manipulation of the argument modulename/option/data/switch can lead to command injection. The attack can b...

D-Link’s various products have vulnerabilities related to access control.

The D-Link DSL-2740R and other products are products of China AUO D-Link.The D-Link DSL-2740R is a high-performance ADSL router.The D-Link DSL-2640B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed broadband cat.The D-Link DSL-2780B is a wireless ADSL routed...

UTT 520W security vulnerability

The UTT 520W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 520W version 1.7.7-180627, which originates from an incorrect manipulation of the parameter passwd1 of the function strcpy in the file /goform/formUser, which could result in a buffer overflow...

UTT 520W security vulnerability

The UTT 520W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 520W version 1.7.7-180627, which originates from an incorrect manipulation of the parameter timestart in the file /goform/ConfigAdvideo, which could lead to a buffer overflow...

I-O Data Device UD-LT2 Router Command Execution

The vulnerability of the I-O Data Device UD-LT2 router’s microprogramming software exists due to the lack of measures taken to neutralize certain special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

FreeBSD Kernel rtsol rtsold Code Execution

The vulnerability of demons for processing Router Solicitation and Router Advertisement in IPv6, represented by rtsol8 and rtsold8 in FreeBSD kernels, is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute...

D-Link DIR-605 Router Command Execution

The vulnerability of the embedded software loading service for D-Link DIR-605 routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

UTT 512W security vulnerabilities

The UTT 512W is a wireless router from China Aitai UTT. A security vulnerability exists in the UTT 512W version 1.7.7-171114, which originates from an incorrect operation of the function strcpy in the file /goform/formConfigCliForEngineerOnly, which could result in a buffer overflow...