2503 matches found
CVE-2025-25430
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the configname parameter on the /cbiaddcert.htm page...
CVE-2025-25428
TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
PT-2025-9122 · Trendnet · Trendnet Tew-929Dru
Name of the Vulnerable Software and Affected Versions: Trendnet TEW-929DRU version 1.0.0.10 Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability. This vulnerability can be exploited via the ssid key of the wifi data parameter on the "/captive portal.htm" API...
CVE-2025-25428: Use of Hard-coded Password
TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2025-25429
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the rname variable inside the havesamename function on the /addschedule.htm page...
PT-2025-9124
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-929DRU version 1.0.0.10 Description A hardcoded password issue was found in the /etc/shadow file, allowing attackers to gain root access. Recommendations For version 1.0.0.10, consider changing the hardcoded password in the...
CVE-2025-25429: Improper Neutralization of Input During Web Page Generation
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the rname variable inside the havesamename function on the /addschedule.htm page...
PT-2025-9125
Name of the Vulnerable Software and Affected Versions Trendnet TEW-929DRU version 1.0.0.10 Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. It occurs via the r name variable inside the have same name function on the "/addschedule.htm" page. Recommendations For...
TRENDnet TEW-929DRU 安全漏洞
The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU version 1.0.0.10 suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the rname variable within the havesamename function on...
Trendnet TEW-929DRU 安全漏洞
The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the configname parameter of the /cbiaddcert.htm page, which can be exploited ...
TRENDnet TEW-929DRU 安全漏洞
The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the ssid key of the wifidata parameter on the /captiveportal.htm page, which...
TRENDnet TEW-929DRU 安全漏洞
The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a hard-coded password vulnerability that can be exploited by an attacker to log in as root...
CVE-2025-25428
The TRENDnet TEW-929DRU wireless router, specifically version 1.0.0.10 , contains a hardcoded password vulnerability within the /etc/shadow file. This security flaw allows an attacker to bypass standard authentication and log in as the root user. To mitigate this risk, it is recommended to change...
CVE-2025-25431: Improper Neutralization of Input During Web Page Generation
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
CVE-2025-25430: Improper Neutralization of Input During Web Page Generation
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the configname parameter on the /cbiaddcert.htm page...
CVE-2025-25429
The Trendnet TEW-929DRU wireless router (version 1.0.0.10 ) is vulnerable to Stored Cross-site Scripting (XSS) . The root cause is the insufficient filtering and escaping of user-supplied data within the r_name variable inside the have_same_name function on the /addschedule.htm page. An attacker ...
PT-2025-9121
Name of the Vulnerable Software and Affected Versions Trendnet TEW-929DRU version 1.0.0.10 Description The issue is related to a Stored Cross-site Scripting XSS vulnerability. It can be exploited via the configname parameter on the "/cbi addcert.htm" API endpoint. Recommendations For Trendnet...
CVE-2025-25431
Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting XSS vulnerability via the The ssid key of wifidata parameter on the /captiveportal.htm page...
