CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC for CVE-2017-16744 and CVE-2017-16748 Proof of Concept PoC CVE: 2017-16744 and 2017-16748 Date: 09/09/2019 Exploit Author: GainSec - Jon Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 and prior as well as Niagara 4 Versions: 4.4 and prior...

axiom

警告 : Axiom Classic は現在メンテナンスモードです。新しい Ax Framework への移行をお勧めします。今後数ヶ月のうちに、2025年より前に Axiom Classic に必要な品質改善アップデートを導入します。Axiom 万歳！ Axiom は動的インフラストラクチャフレームワーク であり、マルチクラウド環境で効率的に作業し、攻撃的・防御的セキュリティに焦点を当てた反復可能なインフラストラクチャを構築・展開するためのものです。 Axiom...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GL.iNet Beryl AX Triple RCE PoC PoC for three unauthenticated command injection vulnerabilities CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 in the GL.iNet GL-MT3000 Beryl AX travel router firmware = 4.4.5. Full writeup:...

The vulnerabilities of the functions ax25_release() and ax25_bind() in the net/ax25/af_ax25.c module, which are part of the networking functions of the Linux kernel, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ax25release and ax25bind functions in the net/ax25/afax25.c module, which implements networking functions in the Linux kernel, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100358 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25kissrcv Bernard Pidoux reported a regression apparently caused...

EUVD-2023-50669

Certain GL.iNet devices with 4.x firmware allow authentication bypass resulting in administrative control of the device via a username that is both a valid SQL statement and a valid regular expression. For example, this affects version 4.3.7 on GL-MT3000 GL-AR300M GL-B1300 GL-AX1800 GL-AR750S...

EUVD-2026-20546

An external control of configuration vulnerability in the OpenVPN module of TP-Link AX53 v1.0 allows an authenticated adjacent attacker to read arbitrary file when a malicious configuration file is processed. Successful exploitation may allow unauthorized access to arbitrary files on the device,...

The vulnerability of the microprogramming software for Fortinet FortiSwitchAXFixed, related to deficiencies in access control, allows a intruder to execute arbitrary system commands.

The vulnerability of Fortinet FortiSwitchAXFixed microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary system commands using a specially created SSH configuration file...

CVE-2025-58345

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930 and W1000. There is unbounded memory allocation via a large buffer in a /proc/driver/unifi0/apcertif11axmode write operation, leading to...

CVE-2025-58345

The Wi-Fi driver in Samsung Mobile Processor and Wearable Processor (including Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000 ) is vulnerable to kernel memory exhaustion . The root cause is an unbounded memory allocation triggered by a large buffer during a write opera...

The vulnerability of the form_fast_setting_wifi_set() function in the microprogrammed routing device Tenda AX-1803, which allows a hacker to trigger a service failure.

The vulnerability of the formfastsettingwifiset function in the Tenda AX-1803 router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the formSetMacFilterCfg() function in the Tenda AX-1806 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetMacFilterCfg function in the Tenda AX-1806 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

The vulnerability of the formSetWifiMacFilterCfg() function in the Tenda AX-1806 router’s microprogramming software allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the formSetWifiMacFilterCfg function in the Tenda AX-1806 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

CVE-2025-70645

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetWifiMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub60CFC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70650

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70651

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow in the ssid parameter of the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub60CFC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70644

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the time parameter of the sub60CFC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-70650

Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the deviceList parameter of the formSetMacFilterCfg function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...