27520 matches found
FreeBSD-SA-25:12.rtsold
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:12.rtsold Security Advisory The FreeBSD Project Topic: Remote code execution via ND6 Router Advertisements Category: core Module: rtsold Announced: 2025-12-1...
Mercury D196G security vulnerabilities
The Mercury D196G is a wireless router from Mercury China. A security vulnerability exists in the Mercury D196G d196gv1-cn-up2020-01-0911.21.44 version, which stems from improper handling of the facpassword parameter, which could lead to a buffer overflow...
FreeBSD -- Remote code execution via ND6 Router Advertisements
Problem Description: The rtsol8 and rtsold8 programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf8 unmodified. resolvconf8 is a shell script which does not validate its input. A lack of quoting meant that shell...
PT-2025-51803
Name of the Vulnerable Software and Affected Versions ipfw versions affected versions not specified Description The tcp-setmss handler may free packet data and generate an error without stopping rule processing. A subsequent rule could then allow traffic to pass after the packet data is removed,...
npm React Router DoS
The vulnerability of the npm React Router package is related to insufficient handling of exceptional states. Exploiting this vulnerability may allow a remote attacker to cause service failures...
CVE-2025-65427
The Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router (firmware version V1.0.0 ) is vulnerable to a brute-force attack due to a lack of rate limiting on the /api/login endpoint (CWE-307). This flaw allows remote attackers to perform automated password enumeration via HTTP POST requests. A success...
Mercury D196G security vulnerabilities
The Mercury D196G is a wireless router from Mercury China. A security vulnerability exists in the Mercury D196G d196gv1-cn-up2020-01-0911.21.44 version, which stems from improper handling of the password parameter and could lead to a buffer overflow...
PT-2025-54682
Note that this vulnerability is only present when using experimental caller / experimental nextAppDirCaller. Summary A Prototype Pollution vulnerability exists in @trpc/server's formDataToObject function, which is used by the Next.js App Router adapter. An attacker can pollute Object.prototype by...
ZTE MC889A Pro Router DoS
The vulnerability of the ZTE MC889A Pro router’s microprogramming software is related to deficiencies in the mechanism for encoding or shielding output data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure...
DZS router XSS
The vulnerability in the DZS router’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
NETGEAR R6260 Router Arbitrary Command Execution
The vulnerability of NETGEAR R6260 and R6850 Wi-Fi router microprogramming systems is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...
TOTOLink A950RG getSaveConfig Code Execution
The vulnerability of the getSaveConfig function in the TOTOLink A950RG router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
CVE-2025-65427
An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute force password enumerations...
TP-Link TL-WR940N V6 DoS
The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
GO-2025-4206 Path Normalization Bypass in Traefik Router + Middleware Rules in github.com/traefik/traefik
Path Normalization Bypass in Traefik Router + Middleware Rules in github.com/traefik/traefik...
CVE-2025-66963
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
PT-2025-51256
Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version V17.0.0cu.596 B20250515 Description The TOTOLINK A3300R router firmware contains a command injection flaw in the NTPSyncWithHost function. The issue is triggered through the host time parameter. This allows for potentia...
PT-2025-51241
An issue in Hitron HI3120 v.7.2.4.5.2b1 allows a local attacker to obtain sensitive information via the Logout option in the index.html...
Exploit for Deserialization of Untrusted Data in Facebook React
Next.Js React Server Components RSC Vulnerabilities This re...
CVE-2025-14659
A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be...