841 matches found
CVE-2019-25249 devolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgr
devolo dLAN 500 AV Wireless+ 3.1.0-1 contains an authentication bypass vulnerability that allows attackers to enable hidden services through the htmlmgr CGI script. Attackers can enable telnet and remote shell services, reboot the device, and gain root access without a password by manipulating...
CVE-2025-65007 Missing Authentication for Critical Function in WODESYS WD-R608U router
In WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 due to lack of authentication in the configuration change module in the adm.cgi endpoint, the unauthenticated attacker can execute commands including backup creation, device restart and resetting the device to factory settings. The...
CVE-2025-54838
Summary: CVE-2025-54838 is an Incorrect Authorization (CWE-863) vulnerability in FortiPortal 7.4.0–7.4.5 that may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests. Affected product/version: FortiPortal 7.4.0 through 7.4.5. Root cause: improper access c...
CVE-2025-64055
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device e.g. file upload, firmware update, reboot... via a crafted authentication bypass...
CVE-2025-60551
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the nextpage parameter in the function formDeviceReboot...
CVE-2025-60551
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the nextpage parameter in the function formDeviceReboot...
CVE-2025-41724
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again...
CVE-2025-41724
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again...
CVE-2025-41724 Sauter: Crash via Incomplete SOAP Request
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again...
CVE-2025-41724
CVE-2025-41724 affects Sauter modulo 6 devices (e.g., modu680-AS, modu660-AS, modu612-LC, EY-modulo 5 modu 5/ modu524/ modu525, ecos 5 ecos504/505). The issue is caused by an unauthenticated remote attacker sending incomplete SOAP requests that crash the wscserver; the watchdog does not restart t...
CVE-2025-41724 Sauter: Crash via Incomplete SOAP Request
An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process will not be restarted by a watchdog and a device reboot is necessary to make it work again...
EUVD-2018-0882
Malware in sbrugna...
EUVD-2016-7670
Malware in sbrugna...
EUVD-2005-4716
Malware in sbrugna...
EUVD-2017-0995
Malware in sbrugna...
EUVD-2013-6843
Malware in sbrugna...
EUVD-2007-3143
Malware in sbrugna...
EUVD-2017-0745
Malware in sbrugna...