47 matches found
CVE-2026-51709: Improper Access Control
Incorrect access control in the setWiFiBasicCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to reconfigure primary Wi-Fi settings via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2021-0602
In onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest users to view and modify Wi-Fi settings for all configured APs due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interactio...
PT-2025-52532
Name of the Vulnerable Software and Affected Versions Tapo C200 V3 affected versions not specified Description The HTTPS service on the device has a connectAP interface lacking proper authentication. An attacker on the same local network can exploit this to change the device’s Wi-Fi settings,...
EUVD-2013-6843
Malware in sbrugna...
EUVD-2019-16982
Malware in sbrugna...
EUVD-2022-25595
Malicious code in bioql PyPI...
EUVD-2022-44111
Malicious code in bioql PyPI...
EUVD-2021-3221
Malicious code in bioql PyPI...
EUVD-2023-25169
Malicious code in bioql PyPI...
CVE-2022-40853
Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fastsettingwifiset...
CVE-2025-3328
CVE-2025-3328 affects the Tenda AC1206 router (firmware 15.03.06.23). The issue is a buffer overflow in the function /goform/fast_setting_wifi_set (form_fast_setting_wifi_set) caused by unbounded input in the ssid and/or timeZone parameters. It can be triggered remotely over the network, with rep...
CVE-2025-25674
Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in formfastsettingwifiset via the parameter ssid...
CVE-2024-57575
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the ssid parameter in the formfastsettingwifiset function...
CVE-2023-21001
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
Design/Logic Flaw
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
CVE-2023-21001
The CVE-2023-21001 issue (Android 13; Pixel devices) is an Elevation of Privilege vulnerability caused by a missing permission check in onContextItemSelected within NetworkProviderSettings.java. It enables local escalation of privilege without additional execution privileges or user interaction, ...
CVE-2023-21001
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
CVE-2023-21001
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...
PUB-A-237672190
In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...