Smart Surveillance: Identifying IoT Device Behaviours Using ML-Powered Traffic Analysis

The proliferation of Internet of Things IoT devices has grown exponentially in recent years, introducing significant security challenges. Accurate identification of the types of IoT devices and their associated actions through network traffic analysis is essential to mitigate potential threats. B...

UTT 520W security vulnerability

The UTT Progress 520W is an enterprise-grade wireless router from Atech Technology UTT designed for office environments such as small businesses and remote branch offices. The UTT Progress 520W suffers from a buffer overflow vulnerability, which originates from the parameter addHostFilter in the...

UTT 520W security vulnerability

The UTT Progress 520W is an enterprise-grade wireless router from Atech Technology UTT designed for office environments such as small businesses and remote branch offices. The UTT Progress 520W suffers from a buffer overflow vulnerability that stems from the failure of the parameter pools in the...

EUVD-2025-201416

A security vulnerability has been detected in Edimax BR-6478AC V3 1.0.15. This issue affects the function sub416898 of the file /boafrm/formDebugDiagnosticRun. The manipulation of the argument host leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2025-14094 Edimax BR-6478AC V3 formSysCmd sub_44CCE4 os command injection

A flaw has been found in Edimax BR-6478AC V3 1.0.15. The affected element is the function sub44CCE4 of the file /boafrm/formSysCmd. This manipulation of the argument sysCmd causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendo...

CVE-2025-14094

Edimax BR-6478AC V3 (firmware 1.0.15) is affected by an OS command injection in the function sub_44CCE4 of /boafrm/formSysCmd. The vulnerability arises from manipulating the sysCmd argument, enabling remote execution of commands. Public exploit code exists, and multiple sources confirm the attack...

EUVD-2025-201448

A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. Impacted is the function sub416990 of the file /boafrm/formTracerouteDiagnosticRun. The manipulation of the argument host results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. Th...

Exploit for CVE-2025-55182

React2Shell – Critical Remote Code Execution in React Server C...

Exploit for CVE-2025-55182

React2Shell – Critical Remote Code Execution in React Server C...

Exploit for CVE-2025-55182

React2Shell: RCE 0-day in React Server Components CVE-2025-5...

Exploit for CVE-2025-55182

CVE-2025-55182-exp 🔥 Overview CVE-2025-55182 is a cri...

CVE-2025-29268

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...

Edimax BR-6478AC has an operating system command injection vulnerability

Edimax BR-6478AC is a dual-band gigabit router from China Xunzhou Edimax. An OS command injection vulnerability exists in the Edimax BR-6478AC V3 version 1.0.15, which stems from the incorrect operation of the parameter host in the file /boafrm/formDebugDiagnosticRun, which can lead to os command...

TOTOLINK N300RT Router Command Execution

The vulnerability of the formWsc function in TOTOLINK N300RT router microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the targetAPSsid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Edimax BR-6478AC has an operating system command injection vulnerability

Edimax BR-6478AC is a dual-band gigabit router from China Xunzhou Edimax. An OS command injection vulnerability exists in Edimax BR-6478AC version 1.0.15, which stems from a misuse of the parameter sysCmd in the file /boafrm/formSysCmd, which can lead to os command injection...

EUVD-2025-201286

A vulnerability has been identified in Genexis Platinum P4410 router Firmware P4410-V2–1.41 that allows a local network attacker to achieve Remote Code Execution RCE with root privileges. The issue occurs due to improper session invalidation after administrator logout. When an administrator logs...

CVE-2025-14015

A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

CVE-2025-34319

TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 discovered in V2.1.8-B20201030.1539 contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via...

Exploit for CVE-2025-55182

CVE-2025-55182 POC for Next.js App-Router CVE-2025-55182 POC...

ALLNET ALL-RUT22GW v3.3.8 Security Vulnerabilities

ALLNET ALL-RUT22GW is a wireless router from ALLNET Germany. A security vulnerability exists in ALLNET ALL-RUT22GW v3.3.8, which stems from the inclusion of hard-coded credentials in the libicos.so library...