CVE-2025-29269

The ALLNET ALL-RUT22GW wireless router (version v3.3.8 ) is susceptible to an OS command injection vulnerability. The root cause is the incorrect operation of the command parameter within the popen.cgi endpoint, which could allow an attacker to gain unauthorized system access. As a temporary work...

Synology Router Manager path traversal vulnerability

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A path traversal vulnerability exists in Synology Router Manager SRM, which originates from a remote authenticated user being able to read .srt files...

Next.js is vulnerable to RCE in React flight protocol

A vulnerability affects certain React packages1 for versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55182. Fixed in: React: 19.0.1, 19.1.2, 19.2.1 Next.js:...

GHSA-9QR9-H5GF-34MP Next.js is vulnerable to RCE in React flight protocol

A vulnerability affects certain React packages1 for versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as CVE-2025-55182. Fixed in: React: 19.0.1, 19.1.2, 19.2.1 Next.js:...

CVE-2025-34319 TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCE

TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 discovered in V2.1.8-B20201030.1539 contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via...

MAL-2025-191970 Malicious code in kwp-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9ede748713472b716d7f508167d66d972607368a0674962d092728ee8ed184 The package kwp-router was found to contain malicious code. Source: ghsa-malware a55b4e54ef732ba70cdf1b376d19fe90c45e48f36c812166e99545e9e798b807 Any...

Malicious code in kwp-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9ede748713472b716d7f508167d66d972607368a0674962d092728ee8ed184 The package kwp-router was found to contain malicious code. Source: ghsa-malware a55b4e54ef732ba70cdf1b376d19fe90c45e48f36c812166e99545e9e798b807 Any...

EUVD-2025-200722

Malicious code in kwp-router npm...

Malicious Package

Overview kwp-router is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

Next.js Framework React Server Components Remote Code Execution (CVE-2025-55182)

The Next.js Framework on the remote host is affected by a remote code execution vulnerability: - A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel,...

EUVD-2025-200290

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

PT-2026-2533

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc4-virtme-g36b21a067510 Description The Linux kernel contains a use-after-free flaw within the mlxsw spectrum router component. This issue occurs when dereferencing a neighbour, potentially leading to...

TOTOLINK A720R Router Sub_401EE0 Function Code Execution

The vulnerability of the sub401EE0 function in TOTOLINK A720R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

D-Link DIR-823G Router Buffer Overflow DoS

The vulnerability of D-Link DIR-823G A1 router microprogramming software is related to an overflow in the buffer of the FillMacCloneMac parameter at the end point /EXCUSHELL. Exploiting this vulnerability can allow a remote attacker to trigger a Denial-of-Service attack using fake input data...

D-Link DIR-816L Router Code Execution

The vulnerability of the soapcgimain function in D-Link DIR-816L router microprogramming software allows a hacker to execute arbitrary code...

Tenda AX1803 Sub Function DoS

The vulnerability of the sub4F55C function in the Tenda AX1803 router’s microprogramming system is related to buffer overflows in the stack when processing the wanMTU parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

TOTOLINK A7000R Router DoS

The vulnerability of the sub421CF0 function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link DIR-816L Router Code Execution

The vulnerability of the genacgimain function in D-Link DIR-816L router microprogramming software allows a hacker to execute arbitrary code...

Tenda AX1803 DoS

The vulnerability of the SetSysTimeCfg function in the Tenda AX1803 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...