evil-ssdp

Overview This tool responds to SSDP multicast discover requests, posing as a generic UPNP device. Your spoofed device will magically appear in Windows Explorer on machines in your local network. Users who are tempted to open the device are shown a configurable phishing page. This page can load a...

CVE-2026-71927

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the rebDevice function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execut...

CVE-2026-71929

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setDevProto function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to...

CVE-2026-71919

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the sysreboot function. The vulnerability is caused by insufficient filtering of the config, act, pathN, and valueN fields before command execution. A remote attacker can trigger this vulnerability via crafted input ...

CVE-2026-71915

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the jsonstatus function. The vulnerability is caused by insufficient filtering of the usescript, usefile, and option fields before command execution. A remote attacker can trigger this vulnerability via crafted input...

CVE-2026-71909

Multiple DrayTek VigorAP models contain a command injection vulnerability in the InquierTime function. The vulnerability is caused by insufficient filtering of the time field before command execution. A remote attacker can trigger this vulnerability via crafted input to execute arbitrary commands...

CVE-2026-71904

Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function. The vulnerability is caused by insufficient filtering of dangerous characters before the eventcode field is concatenated into a system command. A remote attacker can trigger this vulnerabili...

EUVD-2026-64998

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causin...

CVE-2026-71940

DrayTek VigorSwitch multiple models contain a buffer overflow in the acl_general_setup Edit ACE function, caused by copying the name field into a fixed-size buffer without length validation. A remote attacker with valid administrative credentials for the device's web management interface can trig...

CVE-2026-71940 DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Edit ACE

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causi...

CVE-2026-71939 DrayTek VigorSwitch Multiple Models Buffer Overflow via acl_general_setup Add ACE

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the aclgeneralsetup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input, causin...

CVE-2026-71939

Multiple DrayTek VigorSwitch models contain a buffer overflow in the acl_general_setup Add ACE function, caused by copying the name field into a fixed-size buffer without length validation. A remote attacker with valid administrative credentials on the device's web management interface can trigge...

CVE-2026-71938

Multiple DrayTek VigorSwitch models contain a buffer overflow in the switch_lan_gvrp function, caused by unsafe copying of the portList field into an undersized buffer. A remote attacker with valid administrative credentials for the device's web management interface can trigger the vulnerability ...

CVE-2026-71936

Multiple DrayTek VigorSwitch models contain a buffer overflow in the sysreboot function, caused by unsafe concatenation of split valueN data into a fixed-size buffer. A remote attacker with valid administrative credentials on the device's web management interface can trigger the flaw via crafted ...

EUVD-2026-64993

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the pingtrace function. The vulnerability is caused by missing length checks when the host, count, and interval fields are concatenated into a fixed-size buffer. A remote attacker can trigger this vulnerability via...

EUVD-2026-64991

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function. The vulnerability is caused by insufficient validation of the option field. A remote attacker can trigger this vulnerability via crafted input containing path traversal sequences to acce...

CVE-2026-71932

Multiple DrayTek VigorSwitch models contain a directory traversal vulnerability in the getSyslogFile function, caused by insufficient validation of the option field. A remote attacker with valid administrative credentials for the device's web management interface can supply crafted input containi...

EUVD-2026-64989

Multiple DrayTek VigorSwitch models contain a command injection vulnerability in the setTime function. The vulnerability is caused by insufficient filtering of the username and password fields before command execution. A remote attacker can trigger this vulnerability via crafted input to execute...

CVE-2026-71929

Multiple DrayTek VigorSwitch models contain an OS command injection vulnerability in the setDevProto function, caused by insufficient filtering of the username and password fields before command execution. A remote attacker with valid administrative credentials for the device's web management int...

CVE-2026-71928

Multiple DrayTek VigorSwitch models are affected by an OS command injection vulnerability in the fdftDevice function, caused by insufficient filtering of the username and password fields before command execution. A remote attacker with valid administrative credentials for the device's web managem...