EUVD-2025-10967

Malicious code in bioql PyPI...

CVE-2024-48420

Edimax AC1200 Wi-Fi 5 Dual-Band Router BR-6476AC 1.06 is vulnerable to Buffer Overflow via /goform/getWifiBasic...

CVE-2025-28143

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup...

CVE-2025-28145

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat...

CVE-2025-28142

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...

CVE-2025-28144

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function...

CVE-2025-28145

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat...

CVE-2025-28143

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup...

CVE-2025-28145: Improper Neutralization of Special Elements used in a Command

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via partition in /boafrm/formDiskFormat...

CVE-2025-28143: Improper Neutralization of Special Elements used in a Command

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup...

CVE-2025-28142

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...

CVE-2025-28143

The Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC (firmware version V3_1.0.15 ) is vulnerable to a command injection vulnerability. The flaw exists in the /boafrm/formDiskCreateGroup API endpoint due to insufficient filtering of special characters and commands within the groupname param...

CVE-2025-28143

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the groupname at the /boafrm/formDiskCreateGroup...

CVE-2025-28144

The Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 (version 1.0.15) is vulnerable to a stack-based buffer overflow (CWE-122) within the formWsc function. The flaw is triggered via the peerPin parameter in the microprogrammed software system. Successful exploitation could allow a malic...

CVE-2025-28142: Improper Neutralization of Special Elements used in a Command

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V31.0.15 was discovered to contain a command injection vulnerability via the foldername in /boafrm/formDiskCreateShare...

CVE-2025-28144: Stack-based Buffer Overflow

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function...

CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

CVE-2025-28146: Improper Control of Generation of Code

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

CVE-2025-28146

Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a command injection vulnerability via fotaurl in /boafrm/formLtefotaUpgradeQuectel...

The vulnerability in the web interface of Edimax AC1200 Wi-Fi 5 BR-6476AC microprogramming device allows a attacker to execute XSS attacks.

The vulnerability of the web interface of Edimax AC1200 Wi-Fi 5 BR-6476AC microprogramming device lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...