Zyxel - Authentication Bypass

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

WeGIA <= 3.6.4 - Remote Code Execution

WeGIA = 3.6.5 contains a remote code execution caused by improper validation of backup file names in the database restoration functionality, letting attackers with administrative access execute arbitrary OS commands id: CVE-2026-28409 info: name: WeGIA = 3.6.4 - Remote Code Execution author:...

TOTOLINK A3002RU 1.0.8 - Information Disclosure

TOTOLINK A3002RU firmware version 1.0.8 contains a vulnerability in which an unauthenticated attacker can obtain the plaintext admin password by making a GET request for password.htm. This allows remote attackers to gain administrative access without credentials. id: CVE-2018-13317 info: name:...

SureTriggers – All-in-One Automation Platform ≤ 1.0.78 - Authentication Bypass

The SureTriggers- All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

CVE-2025-8730

CVE-2025-8730 – Fuga de Autenticação no Belkin F9K1009/F9K1010 Autor : Byte Reaper Descrição : Este repositório contém um exploit para CVE‑2025‑8730, uma vulnerabilidade crítica de Fuga de Autenticação que afeta a interface web dos roteadores Belkin F9K1009 e F9K1010. A falha está na lógica de...

CVE-2026-71940

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causi...

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

CVE-2026-71915

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering of the usescript, usefile, and option fields before command execution. A remote attacker can trigger this vulnerability via crafted input...

CVE-2026-71912

Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...

EUVD-2026-65001

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the mailmailalert function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

EUVD-2026-65000

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the diaglogmail function. The vulnerability is caused by concatenating multiple smtpReceiver email addresses into a fixed-size buffer without checking the remaining buffer size. A remote attacker can trigger this...

CVE-2026-71939

Multiple DrayTek VigorSwitch models contain a buffer overflow in the acl_general_setup Add ACE function, caused by copying the name field into a fixed-size buffer without length validation. A remote attacker with valid administrative credentials on the device's web management interface can trigge...

EUVD-2026-64999

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causi...

CVE-2026-71938

Multiple DrayTek VigorSwitch models contain a buffer overflow in the switch_lan_gvrp function, caused by unsafe copying of the portList field into an undersized buffer. A remote attacker with valid administrative credentials for the device's web management interface can trigger the vulnerability ...

EUVD-2026-64996

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the poescheduleprofile function. The vulnerability is caused by repeated concatenation of the startdate, starttime, durationtime, howoften, weekdays, monthlydate, and cycleduration fields into small fixed-size buffers...

EUVD-2026-64991

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function, caused by insufficient validation of the option field. A remote attacker with valid administrative credentials for the device's web management interface can supply crafted input containi...

CVE-2026-71928

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the fdftDevice function, caused by insufficient filtering of the username and password fields before command execution. A remote attacker with valid administrative credentials for the device's web managem...

CVE-2026-71917

Multiple DrayTek VigorSwitch models are affected by an OS command injection in the pingtrace function, caused by insufficient validation of the host field before command execution. An attacker with valid administrative credentials for the device's web management interface can supply crafted input...

CVE-2026-71916

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the commandTable function. The root cause is incomplete filtering of dangerous characters—specifically backticks, newline characters, and single quotes—within the parameter field, allowing a remote attack...