27594 matches found
TOTOLINK A3300R setDdnsCfg function buffer overflow vulnerability
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a buffer overflow vulnerability that originates from the failure of the function setDdnsCfg in the file...
IPFire Cross-Site Scripting Vulnerability (CNVD-2025-27706)
IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that stems from not properly cleaning or coding the UPDATEVALUE parameter, which can be exploited by an attacker to inject...
Tenda AC6 DoS
The vulnerability of the AdvSetMacMtuWan function in the Tenda AC6 router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted HTTP request...
TOTOLINK A3300R cstecgi.cgi File Buffer Overflow Vulnerability
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a buffer overflow vulnerability that originates from the parameter ip of the function setDmzCfg in the file...
TOTOLINK A3300R setOpModeCfg function stack buffer overflow vulnerability
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a stack buffer overflow vulnerability that originates from the parameter opmode in the setOpModeCfg function in t...
TOTOLINK A7000R security vulnerabilities
TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability, which stems from the ssid5g parameter in the sub4222E0 function faili...
TOTOLINK LR350 security vulnerabilities
TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the failure of the ssid parameter in the...
CVE-2025-63462
Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub421A04 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
TOTOLINK LR350 security vulnerabilities
TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the failure of the httphost parameter in the...
IPFire Cross-Site Scripting Vulnerability (CNVD-2025-27635)
IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability caused by multiple methods in the cleanhtml function that improperly validate user-supplied input. An attacker could use this...
IPFire Cross-Site Scripting Vulnerability (CNVD-2025-27707)
IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that can be exploited by attackers to inject arbitrary JavaScript code...
CVE-2025-63464
The Totolink LR350 wireless router (firmware version v9.3.5u.6369_B20220309 ) is vulnerable to a stack buffer overflow in the sub_42396C function. The root cause is a failure to properly validate the length and size of input data provided via the ssid parameter. An attacker can exploit this by se...
IPFire Cross-Site Scripting Vulnerability (CNVD-2025-27703)
IPFire is an open source Linux distribution from the IPFire organization, used primarily as a router and firewall. IPFire suffers from a cross-site scripting vulnerability that stems from insufficient PROT parameter cleanup and escaping, which can be exploited by an attacker to steal a victim's...
ZTE MC889A Pro Denial of Service Vulnerability
The ZTE MC889A Pro is a router from China's ZTE Corporation ZTE. The ZTE MC889A Pro suffers from a denial of service vulnerability that originates from insufficient validation of the input parameters of the SMS service interface, which can be exploited by an attacker to cause a denial of service...
EUVD-2025-37201
Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator password...
EUVD-2025-37204
Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...
CVE-2025-63423
Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator password...
CVE-2025-63422
Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...
Malicious code in react-router-kitt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70858804bdf3ade0cd049df0f4e4e3dd4f20283636236919ad48cc1ef8fa59f1 The package react-router-kitt was found to contain malicious code...