Lucene search
K

509 matches found

GithubExploit
GithubExploit
added 8 hours ago21 views

Exploit for Heap-based Buffer Overflow in Mediatek Mt6890_Firmware

CVE-2026-20452 — MediaTek WLAN AP Heap Overflow PoC Proof of...

8CVSS5.8AI score0.00021EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 4 days ago5 views

CVE-2019-25719

Dräger Infinity Acute Care System and Standalone Infinity M540 patient monitors running software versions VG4.1.1, VG4.0.3, and lower contain network message handling vulnerabilities that allow network-adjacent attackers to spoof or tamper with data and cause denial-of-service conditions. Attacke...

8.8CVSS5.8AI score0.00017EPSS
Exploits0References4
NVD
NVD
added 5 days ago7 views

CVE-2026-20452

In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead to remote proximal/adjacent code execution with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00480138; Issue ID: MSV-6295...

8CVSS0.00021EPSS
Exploits1References1
EUVD
EUVD
added 2026/05/13 6:30 p.m.6 views

EUVD-2026-29935

ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator may be tricked to use a crafted configuration file...

6.9CVSS6.6AI score0.00019EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/13 6:30 p.m.4 views

EUVD-2026-29940

ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication...

9.8CVSS7.3AI score0.00089EPSS
Exploits0References3
CVE
CVE
added 2026/05/13 12:1 p.m.6 views

CVE-2026-42062

ELECOM wireless LAN access point devices are affected by an OS command injection in the processing of the username parameter. A crafted request can execute arbitrary OS commands with no authentication required. Affected versions are not explicitly listed in the provided documents; CVSS metrics in...

9.8CVSS7.4AI score0.0057EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.6 views

PT-2026-40597

ELECOM wireless LAN access point devices do not require authentication to access some specific URLs. The affected product may be operated without authentication...

9.8CVSS7.3AI score0.00089EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/03/03 1:37 p.m.2 views

CVE-2026-20430

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151...

8.8CVSS6.1AI score0.00024EPSS
Exploits0References1
NVD
NVD
added 2026/03/02 9:16 a.m.4 views

CVE-2026-20430

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151...

8.8CVSS0.00024EPSS
Exploits0References1
OSV
OSV
added 2026/03/02 9:16 a.m.2 views

CVE-2026-20430

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151...

8.8CVSS5.9AI score0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/02 8:39 a.m.3 views

EUVD-2026-9158

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151...

8.8CVSS6.1AI score0.00024EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/02 8:39 a.m.29 views

CVE-2026-20430

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151...

0.00024EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/24 12:0 a.m.1 views

SonicWALL SonicOS Exposure of Sensitive Information to an Unauthorized Actor (CVE-2022-22277)

A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; i...

5.3CVSS5.3AI score0.00165EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/17 12:0 a.m.3 views

Gryphon Guardian WiFi access point 安全漏洞

The Gryphon Guardian WiFi access point is a security WiFi access point developed by the American company Gryphon. Version 01.06.0006.22 of the Gryphon Guardian WiFi access point contains a security vulnerability. This vulnerability stems from issues with the TLS authentication mechanism, which ma...

7.5CVSS5.8AI score0.00028EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/03 6:57 a.m.3 views

CVE-2026-24465

Stack-based buffer overflow vulnerability exists in ELECOM wireless LAN access point devices. A crafted packet may lead to arbitrary code execution...

9.8CVSS6.1AI score0.00022EPSS
Exploits0References4Affected Software4
Positive Technologies
Positive Technologies
added 2026/02/02 12:0 a.m.3 views

PT-2026-5641

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 /...

5.7AI score0.00018EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/30 11:1 a.m.5 views

CVE-2026-0709

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution...

7.2CVSS6.1AI score0.00021EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.1 views

HPE Networking Instant On Access Points 安全漏洞

HPE Networking Instant On Access Points is a wireless network access point from HPE America. A security vulnerability exists in HPE Networking Instant On Access Points that stems from the processing of specially crafted packets that may cause the device to be unresponsive, potentially triggering ...

7.5CVSS5.8AI score0.00042EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.5 views

CVE-2023-49133

A command execution vulnerability exists in the tddpd enabletestmode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point EAP115 V4 v5.0.4 Build 20220216. A specially crafted series of network requests can lea...

9.8CVSS7.3AI score0.0052EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.5 views

CVE-2023-49134

A command execution vulnerability exists in the tddpd enabletestmode functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926 and Tp-Link N300 Wireless Access Point EAP115 V4 v5.0.4 Build 20220216. A specially crafted series of network requests can lea...

9.8CVSS7.3AI score0.0052EPSS
Exploits1References1
Rows per page
Query Builder