186 matches found
Router-Exploit-Shovel
Router Exploit Shovel 针对无线路由器栈溢出类型的自动化攻击代码生成 Router exploits shovel 是一款针对无线路由器栈溢出类型的自动化攻击代码生成工具。该工具实现了漏洞利用的关键功能，能够自适应栈上数据填充的长度，生成 ROP 链，生成编码后的 shellcode，最终将它们组装成完整的攻击代码。用户只需将攻击代码附加到 POC 的溢出位置，即可完成远程代码执行的漏洞利用。 该工具支持 MIPSel 和 MIPSeb。在 Ubuntu 16.04 64bit 上运行。 安装 确保已安装 git、python3 和 setuptools。 从我们的...
CVE-2021-46422
CVE-2021-46422 韩国的无线路由器 os cmd 注入 安装 git clone https://github.com/kelemaoya/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt 使用 单个url pocsuite -r ../CVE-2021-46422.py -u url --verify 批量URL pocsuite -r ../CVE-2021-46422.py -f url.txt --verify 免责声明🧐...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-59764
Summary: CVE-2026-59764 affects ELECOM wireless LAN routers and access points. The issue is an OS command injection in the WebUI that enables an attacker who can log in to the product to execute arbitrary OS commands. The vulnerability is supported by multiple sources (NVD entries) with confirmed...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-44387
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-44387
Summary (CVE-2026-44387): ELECOM wireless LAN routers and access points are affected by a reflected cross-site scripting vulnerability in the WebUI. Exploitation could allow an arbitrary script to run in a logged-in user’s browser. No exploitation details are provided in the connected documents b...
PT-2026-65420
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-27650
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products...
EUVD-2026-16551
Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...
CVE-2026-27650
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products...
CVE-2026-22080: Cleartext Transmission of Sensitive Information
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the transmission of credentials encoded using reversible Base64 encoding through the web-based administrative interface. An attacker on the same network could exploit this vulnerabilit...
CVE-2026-22082: Session Fixation
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the use of login credentials as the session ID through its web-based administrative interface. A remote attacker could exploit this vulnerability by intercepting network traffic and...
CVE-2026-22079: Cleartext Transmission of Sensitive Information
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network cou...
CVE-2026-22081: Sensitive Cookie Without 'HttpOnly' Flag
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit this vulnerability by capturing session cookies...
CVE-2019-16288
On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash...
EUVD-2017-6518
Malware in sbrugna...