Lucene search
+L

1931 matches found

CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•18 views

COMFAST CF-N1 security vulnerabilities

COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter phyinterface in the file /usr/bin/webmgnt...

9.8CVSS6.8AI score0.04833EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•9 views

CVE-2025-9581: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multipppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phyinterface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used...

9.8CVSS6.6AI score0.04833EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•5 views

CVE-2025-9582: Improper Neutralization of Special Elements used in a Command

A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntptimezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used...

9.8CVSS6.5AI score0.04833EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•21 views

COMFAST CF-N1 security vulnerabilities

COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter interface/displayname in the file /usr/bin/webmgnt...

8.8CVSS6.8AI score0.07519EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•16 views

COMFAST CF-N1 security vulnerabilities

COMFAST CF-N1 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-N1 version 2.6.0, which originates from a command injection due to incorrect operation of the parameter mac in the file /usr/bin/webmgnt...

8.8CVSS6.8AI score0.07519EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/08/28 12:00 a.m.•17 views

PT-2025-35142

Name of the Vulnerable Software and Affected Versions Comfast CF-N1 version 2.6.0 Description A vulnerability was identified in the wireless device dissoc function of the /usr/bin/webmgnt file. Manipulation of the mac argument leads to command injection. The attack may be performed remotely. The...

8.8CVSS6.3AI score0.07519EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/08/28 12:00 a.m.•21 views

PT-2025-35136

Name of the Vulnerable Software and Affected Versions Comfast CF-N1 version 2.6.0 Description A vulnerability exists in Comfast CF-N1 version 2.6.0 due to command injection. The issue is located in the update interface png function within the /usr/bin/webmgnt file. Manipulation of the...

8.8CVSS6.9AI score0.07519EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•6 views

CVE-2025-9586: Improper Neutralization of Special Elements used in a Command

A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wirelessdevicedissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available...

8.8CVSS6.6AI score0.07519EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•5 views

CVE-2025-9585: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilithdeletepicfile of the file /usr/bin/webmgnt. This manipulation of the argument portaldeletepicname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly...

8.8CVSS6.5AI score0.0462EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•8 views

CVE-2025-9584: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function updateinterfacepng of the file /usr/bin/webmgnt. The manipulation of the argument interface/displayname results in command injection. The attack can be executed remotely. The exploit has been made public and...

8.8CVSS6.4AI score0.07519EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•5 views

CVE-2025-9583: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function pingconfig of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

8.8CVSS6.3AI score0.0462EPSS
SaveExploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•4 views

Malicious code in @zalastax/nolb-node-cf (npm)

The package @zalastax/nolb-node-cf was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in doca-cf-theme (npm)

The package doca-cf-theme was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•11 views

Malicious code in cf-menubar-pkg (npm)

The package cf-menubar-pkg was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•7 views

Malicious code in cf-topic (npm)

The package cf-topic was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-16735 Malicious code in cf-topic (npm)

The package cf-topic was found to contain malicious code...

7.2AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-18560 Malicious code in doca-cf-theme (npm)

The package doca-cf-theme was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in ev-refresh-cf (npm)

The package ev-refresh-cf was found to contain malicious code...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-19918 Malicious code in ev-refresh-cf (npm)

The package ev-refresh-cf was found to contain malicious code...

7.2AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•12 views

MAL-2025-16734 Malicious code in cf-menubar-pkg (npm)

The package cf-menubar-pkg was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder