Chinese Hackers Distributing SMS Bomber Tool with Malware Hidden Inside

A threat cluster with ties to a hacking group called Tropic Trooper has been spotted using a previously undocumented malware coded in Nim language to strike targets as part of a newly discovered campaign. The novel loader, dubbed Nimbda, is "bundled with a Chinese language greyware 'SMS Bomber'...

Totolink A3600R Buffer Overflow Vulnerability

TotoLink A3600R is a 6-antenna 1200M wireless router from TotoLink, Taiwan, China.A buffer overflow vulnerability exists in version V4.1.2cu.5182B20201102 of the Totolink A3600R, which stems from a vulnerability in the fread function of infostat.cgi that contains stacker overflow, which can be...

TotoLink A3100R Command Injection Vulnerability (CNVD-2022-54652)

TotoLink A3100R is a series of wireless routers from TotoLink, Taiwan, China.TotoLink A3100R version V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 are vulnerable to command injection, which originates from uci cloudupdateconfig function in the magicid parameter fails to properly filter the...

TotoLink A3100R Access Control Error Vulnerability (CNVD-2022-54651)

TotoLink A3100R is a series of wireless routers from TotoLink, Taiwan, China.TotoLink A3100R versions V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 are vulnerable to an access control error, which could be exploited by attackers to to obtain sensitive information via a crafted web request...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53556)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the filename parameter in /setting/setUpgradeFW...

D-Link DIR-816 A2 Buffer Overflow Vulnerability (CNVD-2022-42153)

The D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A buffer overflow vulnerability exists in the D-Link DIR-816 A2, which stems from a boundary error in the addurlfilter parameter in /goform/websURLFilter when handling untrusted input, which could be exploited by an attacker to...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64492)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 version, which originates from a boundary error in the urladd parameter in the device/goform/websURLFilterAddDel when processing untrusted input. An...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64488)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip when processing untrusted...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50672)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418f10 function, which can be exploited by attackers ...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53550)

TOTOLINK N600R is a wireless router from TOTOLINK, Taiwan, China.The TOTOLINK N600R V5.3c.7159B20190425 firmware version is vulnerable to command injection, which can be exploited by attackers via the /setting/CloudACMunualUpdate in the filename parameter in /setting/CloudACMunualUpdate to conduc...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50671)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418c24 function, which can be exploited by attackers ...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50676)

TOTOLINK N600R is a wireless router from Gion Electronics TOTOLINK, Taiwan, China. buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from the lack of length validation of the apcliKey parameter in the FUN0041bac4 function. An attacker could exploit this...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64490)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 firmware version, which originates from a boundary error in the lanip parameter in /goform/setNetworkLan when handling untrusted input. An attacker...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50670)

TOTOLINK N600R is a wireless router from Gion Electronics TOTOLINK, Taiwan, China.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the url parameter in the FUN00415bf0 function. An attacker could exploit this...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53558)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the webwlanidx parameter in /setting/setWebWlanIdx...

D-Link DIR-816 A2 Command Injection Vulnerability (CNVD-2022-45933)

D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A command injection vulnerability exists in D-Link DIR-816 A2, which stems from the failure to properly filter the admuser and admpass parameters in /goform/setSysAdm to construct command special characters, commands, etc. The...

D-Link DIR-816 Buffer Overflow Vulnerability (CNVD-2022-64487)

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-816 A2v1.10CNB04 firmware version suffers from a buffer overflow vulnerability that originates from a boundary error in the MAC parameter in /goform/editassignment when handling untrusted input. An attacker...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50673)

TOTOLINK N600R is a wireless router from Taiwan, China-based Gion Electronics TOTOLINK.A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN004192cc function. An attacker could exploit this...

TOTOLINK N600R Command Injection Vulnerability (CNVD-2022-53557)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the filename parameter in /setting/setUploadSetting...

Delta Electronics CNCSoft

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: CNCSoft Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow arbitrary code execution or information...