CVE-2020-28148

CVE-2020-28148 攻击WIFI的常用方式，不仅仅适用于信锐（深信服子公司）WIFI产品，经多本人多次攻防实战发现，该漏洞利用方式可绕过多家AC厂商。 本文章用于披露漏洞利用方式，请勿将漏洞用于非法攻击，他人一切行为与本人无关。 English：https://github.com/fengchenzxc/CVE-2020-28148/blob/main/CVE-2020-28148English.md 信锐WIFI身份认证绕过漏洞0day 简介 此场景为信锐（深信服全资子公司）AP3600与AC6600，portal认证系统与AC管理WEB系统均为最新。其余产品未测试。...

CVE-2025-57105

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...

CVE-2023-34734

Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting XSS...

CVE-2024-30977: Incorrect Default Permissions

An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate privileges via the password component...

CVE-2023-34855

A Cross Site Scripting XSS vulnerability in Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi...

Tenhot TWS-100 安全漏洞

The Tenhot TWS-100 is a gateway router that combines gateway functionality with AC management functionality from China-based Tenhot. A security vulnerability exists in the Tenhot TWS-100 V4.0-201809201424 router that stems from the presence of a remote code execution RCE vulnerability...

Weak Password Vulnerability in Aditon AC Centralized Management Platform

Adstone Adstone is a solution provider in the field of mobile Internet, dedicated to providing enterprise users with next-generation wireless network connectivity and application solutions such as Smart Wireless, BYOD, Precise Wireless Positioning, OTO, and Wearable Technology. The products inclu...

Weak password vulnerability in AC centralized management platform of China Construction Zhiyun Network Communications Co.

CCTC Zhiyun Network Communications Co., Ltd. is a service provider specializing in the research and development, production, sales and service of network communications equipment, and providing network security, routers, switches, firewalls, wireless AP coverage and other network products and...

Weak password vulnerability in AC management platform of Guangzhou AnNet Communication Technology Co.

hereinafter referred to as AnNet focuses on the research and development, production, sales and service of network communication equipment based on IP technology, providing users with network security, routers, switches, firewalls, wireless AP coverage and other network products and business...

Weak Password Vulnerability in Intelligent AC Authorization Centralized Management Platform of Shenzhen Vimax Technology Co.

Ltd. is a network total solution and smart home solution provider. Ltd. smart AC authorization centralized management platform has a weak password vulnerability, which can be exploited by attackers to log into the system...

Weak Password Vulnerability in D-Link AC Centralized Management Platform

AUO Electronic Equipment Shanghai Co., Ltd. was registered and established on August 13, 2002 in the Market Supervision Administration of the Free Trade Zone. The company's business scope includes routers, network cards, hubs, switches, converters, etc. in the zone. A weak password vulnerability...