CVE-2024-29671-POC

NEXTU FLETA Wifi6 Router RCE Exploit POC Este documento describe cómo se explotó la vulnerabilidad CVE-2024-29671 en el firmware del router NEXTU FLATA AX1500. Entorno de ejecución Este router está basado en la arquitectura MIPS y utiliza el chipset Realtek con Little-Endian. La versión del...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Desbordamiento de búfer RCE Descripción general Desbordamiento de búfer basado en pila en CWMP TR-069 que conduce a la ejecución remota de código. Campo| Valor ---|--- Producto| TP-Link AX10, AX1500 Afectados| AX10 B"Malicious ACS" B -- C"SetParameterValues"...

CVE-2025-60854

CVE-2025-60854 Vulnerabilidad en D-link AX1500 Recientemente realicé un análisis de vulnerabilidad en un router D-Link y me gustaría documentar mis hallazgos. Modelo objetivo: D-Link AX1500 Versión: 1.20.01 y anteriores El número CVE para este problema está actualmente publicado. La función...

Exploit for CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Buffer Overflow RCE...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

CVE-2025-60854

A vulnerability has been found in D-Link R15 AX1500 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd...

PT-2025-48741

Name of the Vulnerable Software and Affected Versions D-Link R15 AX1500 versions prior to 1.20.02 Description A flaw exists in D-Link R15 AX1500 that allows for command injection. The issue occurs due to manipulation of the model name parameter during a password change request on the web...

CVE-2025-60854

CVE-2025-60854 affects D-Link R15 (AX1500) prior to 1.20.02. The vulnerability allows command injection in httpd by manipulating the model name parameter during a password change on the web administrator page. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, no user interact...

EUVD-2025-27567

Malicious code in bioql PyPI...

EUVD-2025-27074

Malicious code in bioql PyPI...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

PT-2025-36912

Name of the Vulnerable Software and Affected Versions: TP-Link AX10 Ax1500 version 1.3.10 Build 20230130 Description: An issue in TP-Link AX10 Ax1500 allows a remote attacker to obtain sensitive information. Recommendations: At the moment, there is no information about a newer version that contai...

CVE-2025-29089

The CVE-2025-29089 entry concerns TP-Link AX10 Ax1500 (v1.3.10 Build 20230130). Affected component is the router's information handling that enables a remote attacker to obtain sensitive information. Public sources describe an information-disclosure vulnerability caused by a flaw in explicit tran...

CVE-2025-29089

An issue in TP-Link AX10 Ax1500 v.1.3.10 Build 20230130 allows a remote attacker to obtain sensitive information...

CVE-2025-9961

An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. The exploit can only be conducted via a Man-In-The-Middle MITM attack. This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6:...

CVE-2025-9961

An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. The exploit can only be conducted via a Man-In-The-Middle MITM attack. This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 V1/V1.20/V1.26/V1.60/V1.80/V2.60/V3.6:...