CVE-2021-43728: Improper Neutralization of Input During Web Page Generation

Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting XSS vulnerability due to an unsanitized SSID parameter...

Tenda AX1806 form_fast_setting_wifi_set function stack overflow vulnerability

The Tenda AX1806 is a WiFi6 wireless router from Tenda, China. A stack overflow vulnerability exists in the Tenda AX1806 formfastsettingwifiset function, which can be exploited by an attacker to cause a denial of service DoS via the ssid parameter...

CVE-2022-25552

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the ssid parameter...

Stack overflow

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the ssid parameter...

CVE-2022-25552

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS via the ssid parameter...

PT-2022-17360

Name of the Vulnerable Software and Affected Versions Tenda AX1806 version 1.0.0.1 Description A stack overflow was discovered in the function form fast setting wifi set, allowing attackers to cause a Denial of Service DoS via the ssid parameter. Recommendations For Tenda AX1806 version 1.0.0.1,...

Lantronix PremierWave 2050 Web Manager Wireless Network Scanner OS command injection vulnerability

Summary An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...

RaspAP 操作系统命令注入漏洞

RaspAP is a simple wireless AP setup and management for Debian-based devices. An operating system command injection vulnerability exists in RaspAP, which stems from the failure to properly filter "interface", "ssid" in /hostapd in RaspAP versions 2.6 through 2.6.5, ";", "$" and other special...

TP-Link WR2041 缓冲区错误漏洞

TP-Link WR2041 is a wireless WIFI from TP-Link. A buffer error vulnerability exists in the TP-Link WR2041 v1 firmware, which can be exploited to cause a denial of service by sending an HTTP request with a long "ssid" parameter to the "userRpm The vulnerability can be exploited to cause a Denial o...

PT-2021-17152

Name of the Vulnerable Software and Affected Versions: TP-Link WR2041 version v1 Description: The issue allows remote attackers to cause a Denial-of-Service DoS by sending an HTTP request with a very long ssid parameter to the "/userRpm/popupSiteSurveyRpm.html" webpage, which crashes the router...

CVE-2020-27980

Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users...

CVE-2020-27980: Improper Neutralization of Input During Web Page Generation

Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users...

Genexis Platinum-4410 Cross Site Scripting

Exploit Title: Persistent XSS in SSID Date: 10/24/2020 Exploit Author: Amal Mohandas Vendor Homepage: https://genexis.co.in/product/ont/ Version: Platinum-4410 Software version - P4410-V2-1.28 Tested on: Windows 10 Vulnerability Details ====================== Genexis Platinum-4410 Home Gateway...

Genexis Platinum-4410 - 'SSID' Persistent XSS

Exploit Title: Persistent XSS in SSID Date: 10/24/2020 Exploit Author: Amal Mohandas Vendor Homepage: https://genexis.co.in/product/ont/ Version: Platinum-4410 Software version - P4410-V2-1.28 Tested on: Windows 10 Vulnerability Details ====================== Genexis Platinum-4410 Home Gateway...

CVE-2019-3985

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...

Command injection

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...

PT-2019-16827

Name of the Vulnerable Software and Affected Versions Blink XT2 Sync Module versions prior to 2.13.11 Description The issue allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the device's wifi configuration via the ssid parameter...

CVE-2019-3985: Improper Neutralization of Special Elements used in an OS Command

Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the ssid parameter...

CVE-2018-18707

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value...

CVE-2018-16333: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server. While processing the ssid parameter for a POST request, the value is...