61 matches found
UBUNTU-CVE-2026-93803
In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: fix key index receive bound checks libipwrx reads skb-datahdrlen + 3 to extract the WEP key index in both the software-decrypt key selection path and the hardware-decrypted IV/ICV strip path. In both places the...
CVE-2026-93803
The Linux kernel contains a vulnerability in the libipw component where libipw_rx() fails to perform adequate bound checks when extracting the WEP key index . The function reads skb->data[hdrlen + 3], but the existing guard only ensures skb->len >= hdrlen + 3, which does not guarantee th...
CVE-2026-88276
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
CVE-2026-88276 GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
CVE-2026-88276
GeoVision GV-LPC2211 (firmware V1.13) is vulnerable to command injection via its wireless WEP Key1–Key4 fields. When an administrator sets WEP key values containing shell syntax, the device executes them as root , enabling arbitrary command execution . The CVSS 3.1 score is 7.2 (High) (AV:N/AC:L/...
EUVD-2026-75310
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
PT-2026-89317
🚨 HIGH SEVERITY: CVE-2026-88276 CVSS 7.2 GeoVision GV-LPC2211 V1.13 vulnerable to command injection via WEP key values. Allows arbitrary code execution as root. Admins: Review device configs immediately. CVE Vulnerability PatchNow https://t.co/I9snAGnoKZ...
CVE-2026-88276: Improper Neutralization of Special Elements used in an OS Command
GeoVision GV-LPC2211 V1.13 allows administrator-controlled WEP key values containing shell syntax to execute arbitrary commands as root...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm – fixed a potential array out-of-bounds access issue. The parameter IWLSECWEPKEYOFFSET will be used as needed during verification, along with determining the keylen value in the iwlmvmseckeyadd function...
CVE-2026-0839 UTT 进取 520W APSecurity strcpy buffer overflow
A weakness has been identified in UTT 进取 520W 1.7.7-180627. Affected is the function strcpy of the file /goform/APSecurity. Executing a manipulation of the argument wepkey1 can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and...
The vulnerability of the setWiFiBasicConfig function in the Totolink N600R router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the setWiFiBasicConfig function in the Totolink N600R router’s microprogramming system lies in the fact that the operation’s output escapes outside the buffer in memory when processing the wepkey parameter. Exploiting this vulnerability allows a remote attacker to execute...
EUVD-2007-4909
Malware in sbrugna...
EUVD-2006-5580
Malware in sbrugna...
EUVD-2005-3252
Malware in sbrugna...
EUVD-2005-2197
Malware in sbrugna...
EUVD-2001-0507
Malware in sbrugna...
CVE-2023-53575
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...
UBUNTU-CVE-2023-53575
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential array out of bounds access Account for IWLSECWEPKEYOFFSET when needed while verifying keylen size in iwlmvmseckeyadd...
CVE-2023-53575
In CVE-2023-53575, the Linux kernel wifi driver (iwlwifi, mvm) fixes a potential array out-of-bounds access by accounting for IWL_SEC_WEP_KEY_OFFSET when verifying key_len in iwl_mvm_sec_key_add(). The fix is implemented in the kernel code referenced in the stable commits: https://git.kernel.org/...
The vulnerability of the formWlanSetup() function in D-Link DIR-619L router software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formWlanSetup function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the fwdswepKey parameter. Exploiting this vulnerability allows an attacker to execute...