VulnCheck KEV: CVE-2017-18369

The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the advremotelog.asp page and can be exploited through the syslogServerAd...

VulnCheck KEV: CVE-2014-1635

Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103WW1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter...

Tenda AC20 strcpy Buffer Overflow DoS

The vulnerability of the strcpy function in the microprogramming router Tenda AC20 is related to the operation of writing data beyond the buffer boundaries during the processing of the MAC parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

Totolink N600R DoS

The vulnerability of the Totolink N600R router’s microprogramming software is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failure...

D-Link DIR-816A2 security vulnerabilities

The D-Link DIR-816A2 is a router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-816A2 FWv1.10CNB05 version, which originates from the statuscheckpppoeuser parameter in the dirsetWanWifi function that fails to correctly validate the length and size of the input...

Tenda AC7 security vulnerabilities

Tenda AC7 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC7 version 15.03.06.44, which originates from the parameter upnpEn in the file /goform/SetUpnpCfg that fails to correctly validate the length of the input data, and can be exploited by a...

PT-2025-46845

Name of the Vulnerable Software and Affected Versions ToToLink LR1200GB versions 9.1.0u.6619 B20230130 ToToLink NR1800X versions 9.1.0u.6681 B20230703 Description A stack buffer overflow issue exists in the ToToLink routers. The web interface reads the lang parameter and constructs Help URL strin...

Tenda AC7 command injection vulnerability

Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44, which originates from the failure to properly filter the parameter lanIp in the file /goform/AdvSetLanip to construct command special characters, commands, etc...

TOTOLINK downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi file in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromis...

Tenda O3V2 Router DoS

The vulnerability of the fromSafeSetMacFilter function in the Tenda O3V2 router microprogramming system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

TOTOLINK X6000R Router Command Execution

The vulnerability of the TOTOLINK X6000R router’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

EUVD-2025-33297

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

CVE-2025-11444

TOTOLINK N600R is affected: the buffer overflow exists in the HTTP Request Handler’s setWiFiBasicConfig function, in /cgi-bin/cstecgi.cgi, triggered by manipulating the wepkey argument. This vulnerability allows remote exploitation and has publicly available PoCs. Affected firmware versions are p...

CVE-2025-11444 TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launc...

CVE-2025-11418 Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow

A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mitssidindex leads to stack-based buffer overflow. The attack may be...

Tenda CH22 Router Code Execution

The vulnerability of the formSafeEmailFilter function in the Tenda CH22 router software lies in the execution of the operation outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted HTTP request...

Tenda AC18 Router DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC18 router software is related to the issue where the write operation goes beyond the buffer boundaries in memory when processing the wanSpeed parameter. Exploiting this vulnerability could allow a malicious actor to cause servic...

Belkin F9K1015 Router Form WPS Code Execution

The vulnerability of the formWlanSetupWPS function in the /goform/formWlanSetupWPS file of the Belkin F9K1015 router’s microprogramming system is related to the copying of buffers without checking the size of input data during the processing of the webpage parameter. Exploiting this vulnerability...

Tenda AC18 Router DoS

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AC18 router’s microprogramming software is related to the issue where the write operation goes beyond the buffer boundaries in memory when processing the cloneType parameter. Exploiting this vulnerability can allow a malicious act...

Belkin F9K1015 Router Code Execution

The vulnerability of the formPPPoESetup function in the /goform/formPPPoESetup file of the Belkin F9K1015 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing the pppUserName parameter. Exploiting this vulnerability allows...