CVE-2025-66490

CVE-2025-66490 affects Traefik, where versions prior to 2.11.32 and 2.11.31–3.6.2 could bypass path normalization when using PathPrefix, Path, or PathRegex matchers. Under path-based routing, requests containing URL-encoded restricted characters (/, , Null, ;, ?, #) may bypass the middleware chai...

CVE-2025-65289

A stored Cross site scripting XSS vulnerability in the Mercury MR816v2 081C3114 4.8.7 Build 110427 Rel 36550n router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitting a malicious hostname. The injected script is stored and later executed in the...

PT-2025-50103

Name of the Vulnerable Software and Affected Versions NETGEAR C6220 and C6230 versions affected versions not specified Description A flaw exists that allows authenticated local WiFi users to reboot the router. This issue impacts NETGEAR C6220 and C6230 DOCSIS® 3.0 Two-in-one Cable Modem + WiFi...

Tenda AC9 Access Control Vulnerability

Tenda AC9 is a wireless router from Tenda China. An access control error vulnerability exists in Tenda AC9 version 15.03.05.14multi, which stems from improper handling of configuration files and could lead to information disclosure...

Linksys RE7000 Router Firmware <= 2.0.15_211230_1012 Buffer Overflow Vulnerability

Linksys RE7000 routers are prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

NETGEAR C6220 and NETGEAR C6230 security vulnerabilities

The NETGEAR C6220 and NETGEAR C6230 are both 2-in-1 gateways from NETGEAR. A security vulnerability exists in the NETGEAR C6220 and NETGEAR C6230 that stems from an authenticated local WiFi user being able to reboot the router, which could lead to a denial of service attack...

PT-2025-50102

Name of the Vulnerable Software and Affected Versions Mercury MR816v2 version 4.8.7 Build 110427 Rel 36550n Description A stored Cross Site Scripting XSS flaw exists in the Mercury MR816v2 router. A remote attacker on the Local Area Network LAN can inject JavaScript into the router’s management...

CVE-2025-65289

A stored Cross site scripting XSS vulnerability in the Mercury MR816v2 081C3114 4.8.7 Build 110427 Rel 36550n router allows a remote attacker on the LAN to inject JavaScript into the router's management UI by submitting a malicious hostname. The injected script is stored and later executed in the...

CVE-2025-65288

CVE-2025-65288 affects Mercury MR816v2. The reported issue is a buffer overflow in the device when accepting excessively long hostnames from LAN hosts, due to unchecked copies/concatenations into fixed-size buffers. Impact described as crash (DoS) with potential remote code execution. Affected pr...

CVE-2025-65289

Summary: CVE-2025-65289 is a stored XSS vulnerability in Mercury MR816v2 routers (version 4.8.7 Build 110427 Rel 36550n). A LAN attacker can inject JavaScript into the router’s management UI via a malicious hostname, with the script executing in an administrator’s browser context after events lik...

traefik -- Bypassing security controls via special characters

The traefik project reports: There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backend using a matcher based on the path; if the request path contains an encoded restricted...

Linksys E7350 Router Firmware <= 1.1.00.032 Buffer Overflow Vulnerability

Linksys E7350 routers are prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tenda Ax3 security vulnerabilities

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda Ax3 version v16.03.12.11, which stems from the iptvType parameter failing to properly validate the length and size of the input data, and can be exploited by ...

D-Link DIR-823X command injection vulnerability

The D-Link DIR-823X is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DIR-823X 20250416 and earlier versions, which stems from incorrect manipulation of the parameter pppusername in the file /goform/setwansettings, which can lead to command...

Linksys RE7000 Router Privilege Escalation

The vulnerability of the AccessControlList component in the Linksys RE7000 router microprogramming system is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

SGAI Space1 security vulnerabilities

SGAI Space1 is an all-in-one NAS and router appliance from China's Speed Gap SGAI. A security vulnerability exists in SGAI Space1 version 1.0.915 and earlier, which stems from an improper credential storage in component gsaiagent in NAS N1211DS, which could lead to credential disclosure...

UTT 512W security vulnerabilities

The UTT Progressive 512W is an enterprise-grade wireless router from Atech UTT designed for small and medium-sized businesses SOHO and similarly sized network environments for access scenarios of 30 to 50 users. The UTT Progressive 512W suffers from a buffer overflow vulnerability, which originat...

Exploit for Deserialization of Untrusted Data in Facebook React

RSC Infra Scanner rscinfrascan.py is a fast, asynchronous...

Exploit for Deserialization of Untrusted Data in Facebook React

NextRce - Next.js RSC Exploit Tool CVE-2025-55182...

CVE-2025-14094

A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub44CCE4 of the file /boafrm/formSysCmd. This manipulation of the argument sysCmd causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendo...