939 matches found
COMFAST CF-N1 安全漏洞
COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter mac in the file /usr/bin/webmgnt...
COMFAST CF-N1 安全漏洞
COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter phyinterface in the file /usr/bin/webmgnt...
COMFAST CF-N1 安全漏洞
COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter interface/displayname in the file /usr/bin/webmgnt...
PT-2025-35137
Name of the Vulnerable Software and Affected Versions: Comfast CF-N1 version 2.6.0 Description: A vulnerability exists in Comfast CF-N1 version 2.6.0 due to command injection. Manipulation of the portal delete picname argument within the wifilith delete pic file function, located in the...
PT-2025-35136
Name of the Vulnerable Software and Affected Versions: Comfast CF-N1 version 2.6.0 Description: A vulnerability exists in Comfast CF-N1 version 2.6.0 due to command injection. The issue is located in the update interface png function within the /usr/bin/webmgnt file. Manipulation of the...
PT-2025-35142
Name of the Vulnerable Software and Affected Versions Comfast CF-N1 version 2.6.0 Description A vulnerability was identified in the wireless device dissoc function of the /usr/bin/webmgnt file. Manipulation of the mac argument leads to command injection. The attack may be performed remotely. The...
PT-2025-35135
Name of the Vulnerable Software and Affected Versions: Comfast CF-N1 version 2.6.0 Description: A vulnerability exists in the ping config function of the /usr/bin/webmgnt file, which can lead to command injection. Remote exploitation is possible. The exploit has been publicly disclosed...
MAL-2025-16735 Malicious code in cf-topic (npm)
The package cf-topic was found to contain malicious code...
MAL-2025-19918 Malicious code in ev-refresh-cf (npm)
The package ev-refresh-cf was found to contain malicious code...
Malicious code in cf-topic (npm)
The package cf-topic was found to contain malicious code...
Malicious code in cf-menubar-pkg (npm)
The package cf-menubar-pkg was found to contain malicious code...
Malicious code in @zalastax/nolb-node-cf (npm)
The package @zalastax/nolb-node-cf was found to contain malicious code...
Malicious code in doca-cf-theme (npm)
The package doca-cf-theme was found to contain malicious code...
Malicious code in ev-refresh-cf (npm)
The package ev-refresh-cf was found to contain malicious code...
MAL-2025-16734 Malicious code in cf-menubar-pkg (npm)
The package cf-menubar-pkg was found to contain malicious code...
MAL-2025-18560 Malicious code in doca-cf-theme (npm)
The package doca-cf-theme was found to contain malicious code...
Malicious code in cf-install (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bf383febbfbe211ef3966d1f7449a4bc3e6dafb727078945f859a53298a12c Any computer that has this package installed or running should be considered...
CVE-2024-54751
COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...