Lucene search
+L

23672 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:20 p.m.15 views

CVE-2026-41038

This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing password guessing or brute-force attacks against user accounts, leading...

8.8CVSS5.5AI score0.00167EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:18 p.m.15 views

CVE-2026-10063

A vulnerability was identified in TRENDnet TEW-432BRP 3.10B20. Affected by this issue is the function formWPS of the file /goform/formWPS. Such manipulation of the argument peerPin leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and...

9.8CVSS8.2AI score0.00853EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:18 p.m.13 views

CVE-2026-6195

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument admpass leads to os command injection. The attack can be...

10CVSS7.4AI score0.14277EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:15 p.m.12 views

CVE-2026-20167

A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a DoS condition on a remotely managed router. This vulnerability is due to improper error handling. An attacker could exploit this...

7.7CVSS5.5AI score0.00272EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:12 p.m.13 views

CVE-2026-26210

KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balanceserve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket to all interfaces with no authentication and deserializes incoming messages using pickle.loads without validation. Attackers can...

9.8CVSS6.1AI score0.00703EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/06/05 4:45 p.m.9 views

CVE-2026-11341 D-Link DWR-M920 formIMEISetup sub_412DA0 os command injection

A flaw has been found in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub412DA0 of the file /boafrm/formIMEISetup. This manipulation of the argument IMEIvalue causes os command injection. The attack can be initiated remotely. The exploit has been published and may be used...

6.5CVSS6.3AI score0.01044EPSS
SaveExploits0References6
CVE
CVE
added 2026/06/05 4:30 p.m.47 views

CVE-2026-11339

A vulnerability affects D-Link DWR-M920 firmware up to version 1.1.50 . The flaw is located in the function sub_41CF20 within the file /boafrm/formUSSDSetup ; manipulating the argument ussdValue enables command injection . It can be exploited remotely, and multiple sources note that the exploit i...

8.8CVSS6.4AI score0.03133EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2026/06/05 4:30 p.m.16 views

EUVD-2026-34859

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in command injection. It is possible to launch the attack remotely. The exploit is now public and may ...

6.5CVSS5.4AI score0.03133EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2026/06/05 6:7 a.m.23 views

CVE-2026-36602

Mercusys AC12G EU V1 router with firmware AC12GEUV1200909 discloses kernel memory layout via the UPnP GetStatusInfo action. An unauthenticated attacker on the adjacent network can obtain a raw MIPS KSEG0 kernel pointer, revealing kernel memory layout and aiding further exploitation...

4.3CVSS5.5AI score0.00166EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 6:7 a.m.21 views

CVE-2026-36603

Mercusys AC12G EU V1 router with firmware AC12GEUV1200909 exposes 15 of 18 UPnP IGD actions without authentication on port 1900, including AddPortMapping and GetExternalIPAddress. UPnP is enabled by default through the admin interface, allowing any unauthenticated LAN device to create arbitrary...

8.1CVSS5.6AI score0.00211EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 12:9 a.m.11 views

CVE-2025-69755

An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface...

8.2CVSS6.1AI score0.00464EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 12:9 a.m.13 views

CVE-2025-67448

The SMS module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to stored XSS. The application does not properly sanitize user input in SMS messages before storing and displaying them. An attacker can send an SMS containing a malicious XSS payload, which will be executed in the...

7.1CVSS5.8AI score0.00196EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 12:9 a.m.13 views

CVE-2025-67446

Improper Authentication Authentication Bypass exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value e.g., setting it to "admin", an attacker can bypass the authentication schema and gain...

9.8CVSS5.8AI score0.00454EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 12:9 a.m.18 views

CVE-2025-67447

The network diagnosis ping module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system's ping command. An attacker can inject arbitrary OS commands,...

9.8CVSS6AI score0.01026EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/05 12:0 a.m.22 views

D-Link DWR-M920 命令注入漏洞

The D-Link DWR-M920 is a router produced by D-Link Corporation. Versions of the D-Link DWR-M920 prior to 1.1.50 contained a command injection vulnerability. This vulnerability stemmed from improper handling of the ussdValue parameter in the sub41CF20 function found in the /boafrm/formUSSDSetup...

8.8CVSS6.4AI score0.03133EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/06/05 12:0 a.m.16 views

D-Link DWR-M920 操作系统命令注入漏洞

The D-Link DWR-M920 is a wireless router that provides network connectivity and configuration management functions. The D-Link DWR-M920 has a command injection vulnerability. This vulnerability stems from the sub412DA0 function in the file/boafrm/formIMEISetup failing to properly validate the...

6.5CVSS6.9AI score0.01044EPSS
SaveExploits0References7
NVD
NVD
added 2026/06/04 6:16 p.m.18 views

CVE-2025-69755

An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface...

8.2CVSS0.00464EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/04 6:16 p.m.19 views

CVE-2025-67447

The network diagnosis ping module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system's ping command. An attacker can inject arbitrary OS commands,...

9.8CVSS0.01026EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/04 6:16 p.m.17 views

CVE-2025-67448

The SMS module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to stored XSS. The application does not properly sanitize user input in SMS messages before storing and displaying them. An attacker can send an SMS containing a malicious XSS payload, which will be executed in the...

7.1CVSS0.00196EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/04 5:16 p.m.15 views

CVE-2025-67446

Improper Authentication Authentication Bypass exists in Neterbit NW-431F Router 20241014-IR03 and before. The router uses a weak/predictable cookie value for authentication. By modifying the cookie value e.g., setting it to "admin", an attacker can bypass the authentication schema and gain...

9.8CVSS0.00454EPSS
SaveExploits0References2
Rows per page
Query Builder