5346 matches found
CVE-2025-11665: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in D-Link DAP-2695 2.00RC131. This affects the function fwupdatermain of the file rgbin of the component Firmware Update Handler. Performing manipulation results in os command injection. The attack may be initiated remotely. This vulnerability only affects products th...
CVE-2025-11666: Use of Hard-coded Password
A flaw has been found in Tenda RP3 Pro up to 22.5.7.93. This impacts an unknown function of the file forceupgrade.sh of the component Firmware Update Handler. Executing manipulation of the argument currentforceupgradepwd can lead to use of hard-coded password. The attack can only be executed...
D-Link DAP-2695 操作系统命令注入漏洞
The D-Link DAP-2695 is a high-performance dual-band wireless access point from China's AUO D-Link. The D-Link DAP-2695 version 2.00RC131 suffers from an operating system command injection vulnerability, which originates from the failure of the function fwupdatermain of the component Firmware Upda...
PT-2025-43917
Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R that could lead to a stack-based buffer overflow. The issue is located in the setOpModeCfg function within the /cgi-bin/cstecgi.cg file, specifically...
PT-2025-41717
Improper input validation in the UEFI FlashUcAcmSmm module for some IntelR reference platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable local code execution. This result may potentially occur via local...
PT-2025-43869
Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A flaw exists in the SetValue/GetValue function within the /goform/setDhcpConfig file of the Tenda O3 router. Manipulation of the dhcpEn argument can trigger a stack-based buffer overflow, potentially...
PT-2025-43396
Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.06.50 Description The software contains multiple buffer overflow flaws within the openSchedWifi function. An attacker can leverage these to trigger a Denial of Service DoS condition by injecting a specially crafted...
PT-2025-43399
Name of the Vulnerable Software and Affected Versions Tenda AC6 V2.0 version 15.03.06.50 Description The Tenda AC6 V2.0 router contains a stack overflow in the addressNat function due to a flaw in the handling of the page parameter. A crafted input can trigger this issue, leading to a Denial of...
PT-2025-43395
Name of the Vulnerable Software and Affected Versions Tenda AC6 V2.0 version 15.03.06.50 Description The Tenda AC6 V2.0 device contains a buffer overflow in the speed dir parameter within the SetSpeedWan function. A crafted input to this parameter can lead to a Denial of Service DoS...
PT-2025-43377
Name of the Vulnerable Software and Affected Versions Tenda AC6 V2.0 version 15.03.06.50 Description The Tenda AC6 V2.0 router version 15.03.06.50 contains a stack overflow in the page parameter within the DhcpListClient function. A crafted input can trigger this issue, leading to a Denial of...
PT-2025-43397
Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.06.50 Description The SetClientState function contains buffer overflow flaws. Attackers can leverage these flaws to trigger a Denial of Service DoS condition by injecting a specially crafted payload into the limitSpeed,...
PT-2025-43874
Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A stack-based buffer overflow exists in the SetValue/GetValue function within the /goform/sysAutoReboot file of Tenda O3. Manipulation of the enable argument can trigger this issue, allowing for remote...
HPESBHF04935 rev.1 - Certain HPE Simplivity Servers Using Certain Intel Processors, INTEL-SA-01249, 2025.2 IPU, Intel Processor Stream Cache Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Firmware v20251001 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20109 |...
HPESBHF04936 rev.1 - Certain HPE SimpliVity Servers Using Certain Intel Processors, INTEL-SA-01245, 2025.2 IPU - Intel TDX Module Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 380 Gen11 - Prior to HPE SimpliVity Gen11 Firmware v20251001 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-20044 |...
The vulnerability in the web interface of Supermicro MBD-X12STW BMC IPMI servers allows a hacker to update the system’s firmware.
The vulnerability of the BMC IPMI server web interface of Supermicro MBD-X12STW is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to remotely update the system’s firmware...
EUVD-2018-3039
Malware in sbrugna...
EUVD-2019-2807
Malware in sbrugna...
EUVD-2019-17978
Malware in sbrugna...