582 matches found
Rocky Linux 9.2 [CIQ] Security Update: NetworkManager / NetworkManager-adsl / NetworkManager-bluetooth / etc Multiple Vulnerabilities (ciqsa-2026_1616)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261616 advisory. This advisory aggregates security fixes for the NetworkManager SRPM in CIQ LTS 9.2. It addresses 10 CVEs: CVE-2018-15688, CVE-2020-10754, CVE-2009-0365,...
Rocky Linux 9 [CIQ] Security Update: NetworkManager / NetworkManager-adsl / etc (crlsa-2025_0377)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20250377 advisory. NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its...
Shuttle 915 WM DNS Change
Module exploits Shuttle Tech ADSL Modem-Router 915 WM dns change vulnerability. If the target is vulnerable it is possible to change dns settings. !/usr/bin/env python3 -- coding: utf-8 -- """Shuttle 915 WM DNS Change""" import re from kittysploit import from lib.protocols.http.httpclient import...
Movistar ADSL Router BHS_RTA Path Traversal
Module exploits Movistar ADSL Router BHSRTA Path Traversal vulnerability which allows to read any file on the system. !/usr/bin/env python3 -- coding: utf-8 -- """Movistar ADSL Router BHSRTA Path Traversal""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...
Comtrend ADSL - Remote Code Execution Detection
Comtrend ADSL CT-5367 C01R12 router is susceptible to remote code execution. A remote user can execute arbitrary commands via the telnet interface, The password for this interface is leaked to unauthenticated users via the password.cgi endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Comtre...
CVE-2019-25465
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...
EUVD-2019-19736
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...
CVE-2019-25465
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...
CVE-2019-25465 Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...
CVE-2019-25465
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...
CVE-2019-25465
CVE-2019-25465 affects HiSilicon HiIpcam V100R003. A directory traversal in the cgi-bin getadslattr.cgi endpoint allows unauthenticated remote access to sensitive configuration files, exposing ADSL credentials and network configuration parameters (including usernames, passwords, DNS settings). Re...
CVE-2019-25465 Hisilicon HiIpcam V100R003 Information Disclosure via Directory Traversal
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...
PT-2026-24763
Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...
CVE-2025-71057
Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME1.00 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user...
CVE-2018-25125
Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument...
CVE-2018-25125: Buffer Copy without Checking Size of Input
Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument...
Netis ADSL Router security vulnerability
Netis ADSL Router is a router from China Tiantan Netis that supports ADSL connections. A security vulnerability exists in the Netis ADSL Router DL4322D RTK version 2.1.1, which originates from a buffer overflow in the embedded FTP service, which could lead to a denial of service attack...
EUVD-2001-1464
Malware in sbrugna...