The vulnerability of the web interface of the microprogramming software for routers EDIMAX BR-6476AC allows a hacker to enhance their privileges and execute arbitrary commands.

The vulnerability of the web interface of the microprogrammed software router EDIMAX BR-6476AC is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands...

CVE-2024-48420

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic...

CVE-2024-48417

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Cross Site Scripting XSS in : /bin/goahead via /goform/setStaticRoute, /goform/fromSetFilterUrlFilter, and /goform/fromSetFilterClientFilter...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in the Edimax BR-6476AC version 1.06, which stems from /goform/fromSetDDNS does not properly handle special characters entered by the user, allowing an attacker to inject and execute arbitrary shell...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which stems from a command injection issue that allows an attacker to execute arbitrary shell commands with root privileges...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which originates from a buffer overflow attack via /goform/getWifiBasic...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which originates from a buffer overflow attack via /goform/fromSetLanDhcpsClientbinding...

Edimax BR-6476AC 安全漏洞

Edimax BR-6476AC is a dual-band router from China Xunzhou Edimax. A security vulnerability exists in Edimax BR-6476AC version 1.06, which stems from vulnerability to cross-site scripting attacks...

B&R Automation Runtime 加密问题漏洞

B&R Automation Runtime is an automation runtime from B&R Automation. An encryption issue vulnerability exists in B&R Automation Runtime versions prior to 6.1 and B&R mapp View versions prior to 6.1, which stems from the use of corrupt or risky encryption algorithms...

PT-2025-3702 · B&R · B&R Automation Runtime +1

Name of the Vulnerable Software and Affected Versions: B&R Automation Runtime versions prior to 6.1 B&R mapp View versions prior to 6.1 Description: A "Use of a Broken or Risky Cryptographic Algorithm" issue in the SSL/TLS component may be exploited by unauthenticated network-based attackers to...

The vulnerability of the mst component in the Linux operating system’s kernel allows a hacker to gain elevated privileges within the system.

The vulnerability of the mst component in the Linux operating system is related to errors in the usage after it is freed in the brmstsetstate function. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

CVE-2024-53144

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE This aligned BR/EDR JUSTWORKS method with LE which since 92516cd97fd4 "Bluetooth: Always request for user confirmation for Just Works" always request user confirmation wi...

CVE-2024-53144

The CVE-2024-53144 entry maps to a Linux kernel Bluetooth issue in hci_event: BR/EDR JUST_WORKS was aligned with LE, affecting the Just Works pairing flow and forcing user confirmation via confirm_hint due to policy changes in bluetoothd. The description notes this alignment and its rationale; no...

CVE-2024-53144 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE This aligned BR/EDR JUSTWORKS method with LE which since 92516cd97fd4 "Bluetooth: Always request for user confirmation for Just Works" always request user confirmation wi...

WordPress plugin Blogger 301 Redirect SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

TRENDnet TEW-651BR 安全漏洞

The TRENDnet TEW-651BR is a wireless router from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-651BR version 2.04B1, TEW-652BRP version 3.04b01, and TEW-652BRU version 1.00b12, which originates from the ptRuleApplicationName1.1.6.0.0 parameter in the /specialap.htm page...

netfilter: br_netfilter: fix panic with metadata_dst skb

...

AZL-51210 CVE-2024-50045 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...

DEBIAN-CVE-2024-50045

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...

UBUNTU-CVE-2024-50045

In the Linux kernel, the following vulnerability has been resolved: netfilter: brnetfilter: fix panic with metadatadst skb Fix a kernel panic in the brnetfilter module when sending untagged traffic via a VxLAN device. This happens during the check for fragmentation in brnfdevqueuexmit. It is...