CVE-2020-28635

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-35631

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

Mageia: Security Advisory (MGASA-2020-0036)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mitsubishi Electric Air Conditioning System

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: Multiple Air Conditioning Systems Vulnerability: Incorrect Implementation of Authentication Algorithm 2. RISK EVALUATION An attacker could exploit this vulnerability by impersonating...

Edimax EW-7438RPn 1.13 - Remote Code Execution

Exploit Title: Edimax EW-7438RPn 1.13 - Remote Code Execution Date: 2020-04-23 Exploit Author: Besim ALTINOK Vendor Homepage: https://www.edimax.com/edimax/merchandise/merchandisedetail/data/edimax/global/wi-firangeextendersn300/ew-7438rpnmini/ Version:1.13 Tested on: Edimax EW-7438RPn 1.13 Versi...

Edimax EW-7438RPn 1.13 Remote Code Execution

Exploit Title: Edimax EW-7438RPn 1.13 - Remote Code Execution Date: 2020-04-23 Exploit Author: Besim ALTINOK Vendor Homepage: https://www.edimax.com/edimax/merchandise/merchandisedetail/data/edimax/global/wi-firangeextendersn300/ew-7438rpnmini/ Version:1.13 Tested on: Edimax EW-7438RPn 1.13 Versi...

Edimax EW-7438RPn 1.13 - Remote Code Execution Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Edimax EW-7438RPn 1.13 - Remote Code Execution Exploit Author: Besim ALTINOK Vendor Homepage: https://www.edimax.com/edimax/merchandise/merchandisedetail/data/edimax/global/wi-firangeextendersn300/ew-7438rpnmini/ Version:1....

Edimax EW-7438RPn - Information Disclosure (WiFi Password) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Edimax EW-7438RPn 1.13 - Information Disclosure WiFi Password Date: 2020-04-21 Exploit Author: Besim ALTINOK Vendor Homepage:...

Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Edimax EW-7438RPn - Cross-Site Request Forgery MAC Filtering Exploit Author: Besim ALTINOK Vendor Homepage:...

PT-2025-26460

Name of the Vulnerable Software and Affected Versions: Edimax EW-7438RPn versions 1.13 and prior Description: An OS command injection issue exists, allowing an authenticated attacker to inject shell commands and achieve arbitrary command execution as the root user. This is due to the improper...

PT-2025-26461 · Edimax · Edimax Ew-7438Rpn Mini

Name of the Vulnerable Software and Affected Versions: Edimax EW-7438RPn Mini firmware versions 1.13 and prior Description: A remote authenticated attacker can exploit an OS command injection issue via the syscmd.asp form handler, specifically through the "sysCmd" parameter in the...

Edimax EW-7438RPn Information Disclosure

Exploit Title: Edimax EW-7438RPn 1.13 - Information Disclosure WiFi Password Date: 2020-04-21 Exploit Author: Besim ALTINOK Vendor Homepage: https://www.edimax.com/edimax/merchandise/merchandisedetail/data/edimax/global/wi-firangeextendersn300/ew-7438rpnmini/ Version:1.13 Tested on: Edimax...

Edimax EW-7438RPn - Cross-Site Request Forgery (MAC Filtering)

Exploit Title: Edimax EW-7438RPn - Cross-Site Request Forgery MAC Filtering Date: 2020-04-21 Exploit Author: Besim ALTINOK Vendor Homepage: https://www.edimax.com/edimax/merchandise/merchandisedetail/data/edimax/global/wi-firangeextendersn300/ew-7438rpnmini/ Version:1.13 Tested on: Edimax...

Edimax EW-7438RPn Cross Site Request Forgery

Exploit Title: Edimax EW-7438RPn - Cross-Site Request Forgery MAC Filtering Date: 2020-04-21 Exploit Author: Besim ALTINOK Vendor Homepage: https://www.edimax.com/edimax/merchandise/merchandisedetail/data/edimax/global/wi-firangeextendersn300/ew-7438rpnmini/ Version:1.13 Tested on: Edimax...

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution

Exploit Title: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Date: 2020-04-13 Exploit Author: Wadeek Hardware Version: EW-7438RPn-v3 Mini Firmware Version: 1.23 / 1.27 Vendor Homepage:...

Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Exploit Author: Wadeek Hardware Version: EW-7438RPn-v3 Mini Firmware Version: 1.23 / 1.27 Vendor Homepage:...

Edimax Technology EW-7438RPn-v3 Mini 1.27 Remote Code Execution

Exploit Title: Edimax Technology EW-7438RPn-v3 Mini 1.27 - Remote Code Execution Date: 2020-04-13 Exploit Author: Wadeek Hardware Version: EW-7438RPn-v3 Mini Firmware Version: 1.23 / 1.27 Vendor Homepage:...

Edimax EW-7438RPn Mini Cross-Site Scripting Vulnerability

Edimax EW-7438RPn Mini is a wireless router product from Edimax Technology. A cross-site scripting vulnerability exists in the SSID field in the Edimax EW-7438RPn Mini v2 prior to version 1.26. A remote attacker can exploit this vulnerability to perform a phishing attack...

Design/Logic Flaw

An issue was discovered in Edimax EW-7438RPn Mini v2 before version 1.26. There is XSS in an SSID field...

CVE-2018-10569

Edimax EW-7438RPn Mini v2 is affected by a Cross‑Site Scripting (XSS) vulnerability in the SSID field prior to version 1.26. The issue is triggered via the SSID and can enable phishing-like misuse, with network access as the attack surface. A fix is available in version 1.26 or later; update to m...