719 matches found
EUVD-2023-37930
Malicious code in bioql PyPI...
EUVD-2024-41876
Malicious code in bioql PyPI...
CVE-2025-10547
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...
CVE-2025-10547 CVE-2025-10547
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...
CVE-2025-10547
DrayTek Vigor Routers running DrayOS firmware are vulnerable to Remote Code Execution (RCE) via an uninitialized variable in the HTTP CGI request arguments processing component. This memory corruption flaw allows an unauthenticated attacker to inject arbitrary commands or execute malicious payloa...
CVE-2025-10547 CVE-2025-10547
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...
Vigor routers running DrayOS are vulnerable to RCE via EasyVPN and LAN web administration interface
Overview A remote code execution RCE vulnerability was discovered through the EasyVPN and LAN web administration interface of Vigor routers by Drayteck. A script in the LAN web administration interface uses an unitialized variable, allowing an attacker to inject arbitrary commands through memory...
CVE-2025-10547: Undefined Security Weakness
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...
PT-2025-40432
Name of the Vulnerable Software and Affected Versions DrayOS routers versions prior to the fixed firmware. Description A flaw exists in the HTTP CGI request arguments processing component of DrayOS routers, potentially allowing an attacker to execute code remotely RCE through memory corruption...
VulnCheck KEV: CVE-2020-14993
A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authusersms action to mainfunction.cgi...
The vulnerability of the web interface of DrayTek Vigor microprogramming software, related to the unencrypted storage of critical information, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the web interface of DrayTek Vigor microprogramming software routers involves the unencrypted storage of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the web interface of Draytek Vigor Access Point software lies in the use of strictly encrypted credentials. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the web interface of Draytek Vigor Access Point software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
Malicious code in test-mlw2-vigor-drows-flics-bigot (npm)
The package test-mlw2-vigor-drows-flics-bigot was found to contain malicious code...
MAL-2025-36576 Malicious code in test-mlw2-vigor-drows-flics-bigot (npm)
The package test-mlw2-vigor-drows-flics-bigot was found to contain malicious code...
CVE-2024-43027
DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...
CVE-2024-46597
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46551
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAPwd parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46559
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPAUsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-46582
Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...