Lucene search
+L

658 matches found

CNNVD
CNNVD
added 2026/02/06 12:0 a.m.14 views

Edimax BR-6288ACL 代码注入漏洞

The Edimax BR-6288ACL is a wireless router produced by Edimax Corporation. Versions of Edimax BR-6288ACL prior to 1.12 contained a code injection vulnerability. This vulnerability stemmed from incorrect handling of a parameter named manualssid in the file wizWISP24gmanual.asp, which could lead to...

4.8CVSS5.7AI score0.00223EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/05 10:15 p.m.9 views

CVE-2026-1970

A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The...

6.1CVSS5.5AI score0.00255EPSS
SaveExploits1References4
NVD
NVD
added 2026/02/05 10:15 p.m.14 views

CVE-2026-1970

A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The...

6.1CVSS0.00255EPSS
SaveExploits1References4
CVE
CVE
added 2026/02/05 10:2 p.m.24 views

CVE-2026-1970

Summary: CVE-2026-1970 affects Edimax BR-6258n up to firmware 1.18, specifically the formStaDrvSetup function in /goform/formStaDrvSetup. The vulnerability arises from manipulating the submit-url argument, enabling an open redirect. The issue can be triggered remotely, and exploits have been publ...

6.1CVSS5.2AI score0.00255EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/05 10:2 p.m.53 views

CVE-2026-1970 Edimax BR-6258n formStaDrvSetup redirect

A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The...

5.1CVSS0.00255EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/05 10:2 p.m.8 views

CVE-2026-1970

A flaw has been found in Edimax BR-6258n up to 1.18. This issue affects the function formStaDrvSetup of the file /goform/formStaDrvSetup. This manipulation of the argument submit-url causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The...

5.1CVSS5.2AI score0.00255EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/05 12:0 a.m.21 views

PT-2026-6634

Name of the Vulnerable Software and Affected Versions Edimax BR-6258n versions up to 1.18 Description A flaw exists in the formStaDrvSetup function within the /goform/formStaDrvSetup file. Manipulation of the submit-url argument can lead to an open redirect. This issue can be exploited remotely...

5.1CVSS5.3AI score0.00255EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.14 views

Edimax BR-6258n 输入验证错误漏洞

The Edimax BR-6258n is a portable wireless router produced by Edimax of Taiwan, China. Versions of Edimax BR-6258n prior to 1.18 contained a vulnerability related to input validation errors. This vulnerability stemmed from improper handling of the submit-url parameter in the formStaDrvSetup...

6.1CVSS5.8AI score0.00255EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/01/20 4:21 p.m.12 views

CVE-2025-11044

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service D...

8.9CVSS5.6AI score0.00313EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/19 3:57 p.m.13 views

EUVD-2026-3214

An Allocation of Resources Without Limits or Throttling vulnerability in the ANSL-Server component of B&R Automation Runtime versions prior to 6.5 and prior to R4.93 could be exploited by an unauthenti-cated attacker on the network to win a race condition, resulting in permanent denial-of-service...

8.9CVSS5.6AI score0.00313EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/19 12:0 a.m.16 views

PT-2026-3450

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions prior to 6.5 B&R Automation Runtime versions prior to R4.93 Description An issue exists in the ANSL-Server component that involves allocation of resources without limits or throttling. An unauthenticated attacke...

8.9CVSS5.8AI score0.00313EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/01/19 12:0 a.m.11 views

B&R Automation Studio Trust Management Vulnerability

B&R Automation Studio is an integrated development environment provided by the Austrian company B&R. Versions of B&R Automation Studio prior to version 6.5 contained a trust management vulnerability. This vulnerability stemmed from improper verification of OPC-UA client and ANSL over TLS client...

9.1CVSS5.8AI score0.00206EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2026/01/18 9:4 a.m.8 views

netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

...

7.5CVSS5.4AI score0.00302EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/09 12:0 a.m.11 views

PT-2026-1955

Name of the Vulnerable Software and Affected Versions EDIMAX BR-6208AC version V2 1.02 Description The EDIMAX BR-6208AC version V2 1.02 is susceptible to Command Injection. The issue occurs because the pppUserName field is passed directly to a shell command using the system function without...

9.8CVSS7.5AI score0.24487EPSS
SaveExploits1References5
CVE
CVE
added 2026/01/09 12:0 a.m.20 views

CVE-2025-70161

CVE-2025-70161 affects the EDIMAX BR-6208AC V2_1.02. The vulnerability is a command injection where the pppUserName field is directly passed to a shell via system() without sanitization, enabling arbitrary code execution. Reported by multiple sources, it has a CVSS v3.1 base score of 9.8 (Network...

9.8CVSS7.9AI score0.24487EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/09 12:0 a.m.5 views

CVE-2025-70161

EDIMAX BR-6208AC V21.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing...

7.9AI score0.24487EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/01/09 12:0 a.m.250 views

CVE-2025-70161

EDIMAX BR-6208AC V21.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell command via the system function without proper sanitization. An attacker can exploit this by injecting malicious commands into the pppUserName field, allowing...

0.24487EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.18 views

CVE-2025-1612

A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5gbasic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted...

6.1CVSS3.8AI score0.00433EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.10 views

PT-2026-28333

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the rust binder component related to handling binder death notifications. Specifically, the set notification done function may be called without...

5.9AI score0.0009EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/12/31 6:2 p.m.10 views

CVE-2025-15258

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be...

6.1CVSS4.6AI score0.00225EPSS
SaveExploits1References1
Rows per page
Query Builder