VulnCheck KEV: CVE-2018-5999

An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...

VulnCheck KEV: CVE-2018-6000

An issue was discovered in AsusWRT before 3.0.0.4.38410007. The dovpnuploadpost function in router/httpd/web.c in vpnupload.cgi provides functionality for setting NVRAM configuration values, which allows attackers to set the admin password and launch an SSH daemon or enable infosvr command mode,...

CVE-2018-18320

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because exec.php has a popen call. NOTE: the vendor indicates that Merlin.PHP is designed only for use on a trusted intranet network, and intentionally allows remote co...

CVE-2018-18319

An issue was discovered in the Merlin.PHP component 0.6.6 for Asuswrt-Merlin devices. An attacker can execute arbitrary commands because api.php has an eval call, as demonstrated by the /6/api.php?function=command=remote='ls' URI. NOTE: the vendor indicates that Merlin.PHP is designed only for us...

EUVD-2017-7107

Malware in sbrugna...

EUVD-2018-12893

Malware in sbrugna...

EUVD-2018-12892

Malware in sbrugna...

EUVD-2021-26568

Malware in sbrugna...

EUVD-2017-7106

Malware in sbrugna...

EUVD-2017-2973

Malware in sbrugna...

EUVD-2017-2974

Malware in sbrugna...

EUVD-2018-20485

Malware in sbrugna...

EUVD-2018-20486

Malware in sbrugna...

EUVD-2018-12891

Malware in sbrugna...

EUVD-2017-7104

Malware in sbrugna...

EUVD-2018-12894

Malware in sbrugna...

EUVD-2017-7105

Malware in sbrugna...

EUVD-2022-30935

Malicious code in bioql PyPI...

CVE-2021-3229

Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.38410177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error...

CVE-2018-8879

Stack-based buffer overflow in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to execute arbitrary code by providing a long string to the blocking.asp page via a GET or POST request. Vulnerable parameters ar...