WAVLINK - Access Control

Wavlink WN530HG4, WN531G3, WN533A8, and WN551K are susceptible to improper access control via /cgi-bin/ExportAllSettings.sh, where a crafted POST request returns the current configuration of the device, including the administrator password. No authentication is required. The attacker must perform...

AdbNet

adb - An exploitation tool for android devices. A tool that allows you to search for vulnerable android devices across the world and exploit them. Features Features: - Post-Exploitation modules to control and tinker with the device you are connected to. - Scanners to search for vulnerable android...

lamda

FIRERPA Android ｜ AI-Powered Automation An all-in-one Android automation framework that combines on-device services, AI-ready agents, and extensible tool invocation. Documentation | 使用文档 | TELEGRAM | QQ Group | SKILLS | llms-full.txt | 中文版本 FIRERPA is an all-in-one Android device control platform...

scrcpy

!WARNING This GitHub repo https://github.com/Genymobile/scrcpy is the only official source for the project. Do not download releases from random websites, even if their name contains scrcpy. scrcpy v5.0.1 pronounced "scr een c opy " This application mirrors Android devices video and audio connect...

CVE-2026-121405

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRPMJDEVICECONTROL request with IOCTLUSBPRINTGET1284ID and a...

EUVD-2026-115937

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRPMJDEVICECONTROL request with IOCTLUSBPRINTGET1284ID and a...

CVE-2026-121405

FreeRDP versions before 3.32.2 are vulnerable to a memory exhaustion issue within the serial RDPDR device control. The root cause is a failure to cap the OutputBufferLength in serial device-control IRP requests. A malicious server using serial redirection can trigger excessive memory allocation o...

CVE-2026-121405: FreeRDP: FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious…

FreeRDP before 3.32.2 fails to cap the OutputBufferLength in serial device-control IRP requests, allowing malicious servers to trigger excessive memory allocation. Attackers running a server with serial redirection can send an IRPMJDEVICECONTROL request with IOCTLUSBPRINTGET1284ID and a...

cve-2023-20198-poc-cisco

CVE-2023-20198-poc CVE-2023-20198 is a critical vulnerability in the Cisco IOS XE software Web UI feature that allows unauthenticated remote attackers to create accounts with privilege level 15 on affected systems, thereby gaining full control of the device. The vulnerability primarily stems from...

ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit CVE IDs CVE-2019-11061 : Broken access control in HG100 Affected products : ASUS SmartHome Gateway HG100 Firmware version Affected products : ASUS SmartHome Android APP version 3.0.45190701 Description If the attacker is on the same internal network as the HG100 or a mobile...

CVE-2020-25749

CVE-2020-25749 Suggested description The Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras firmware versions v342, v339 could allow an remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a...

CVE-2013-20008

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20007

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timerinterval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and ru...

CVE-2013-20008 Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20008

The Linksys WAG200G (firmware versions through 1.01.06 ) is vulnerable to a weak password change mechanism. An attacker with access to an authenticated administrator browser session can change the administrator password without providing the current password. This allows the attacker to lock out ...

EUVD-2013-7302

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20008 Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate...

CVE-2013-20007

The Linksys WAG200G (firmware versions through 1.01.06 ) is vulnerable to an OS command injection flaw located in the timer_interval parameter of setup.cgi. This vulnerability allows authenticated attackers to execute arbitrary commands by injecting backtick-delimited input. A successful attack, ...

CVE-2013-20007 Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timerinterval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and ru...

EUVD-2013-7301

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timerinterval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and ru...