4404 matches found
CVE-2025-50609
A vulnerability in Netis WF2880 v2.1.40207 affects the cgitest.cgi file (Function_00465620). The root cause is a buffer overflow when an attacker controls the specify_parame parameter in the payload, which can crash the process and potentially yield a Denial of Service. Connected sources corrobor...
PT-2025-33016 · Totolink · Totolink A7000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A7000R firmware version 9.1.0u.6115 B20201022 Description: An attacker can bypass login by sending a specific request through the formLoginAuth.htm endpoint. Recommendations: Apply a configuration change to restrict access to the...
CVE-2025-51452
In TOTOLINK A7000R firmware 9.1.0u.6115B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm...
CVE-2025-20044
Improper locking for some IntelR TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access...
HPESBHF04922 rev.1 - Certain HPE ProLiant DL/ML/XD Servers Using Certain Intel Processors, INTEL-SA-01311, Intel Xeon 6 Processor with Intel TDX Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.4005-22-2025 HPE ProLiant Compute DL360 Gen12 - Prior to 1.4005-22-202...
OpenHarmony 资源管理错误漏洞
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A resource management error vulnerability exists in OpenHarmony v5.0.3 and earlier versions, which stems from a post-release reuse issue in tcb and could lead to the execution of arbitrar...
CVE-2025-8730
A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to hard-coded credentials. The attack may be launched remotely. The exploit has been...
CVE-2025-8810
CVE-2025-8810 affects Tenda AC20 v16.03.08.05. The vulnerable component is the strcpy call in /goform/SetFirewallCfg, where manipulating the firewallEn argument causes a stack-based buffer overflow. The issue enables remote code execution with network access, matching the V3/V4 CVSS vectors and a...
CVE-2025-8810 Tenda AC20 SetFirewallCfg strcpy stack-based overflow
A vulnerability classified as critical was found in Tenda AC20 16.03.08.05. Affected by this vulnerability is the function strcpy of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit...
Tenda AC20 安全漏洞
Tenda AC20 is a wireless router from Tenda, China. A security vulnerability exists in Tenda AC20 version 16.03.08.05, which originates from a stack buffer overflow caused by the strcpy parameter firewallEn in the function strcpy in the file /goform/SetFirewallCfg, which could lead to a remote...
Dell ControlVault3 cv_upgrade_sensor_firmware out-of-bounds write vulnerability
Talos Vulnerability Report TALOS-2025-2137 Dell ControlVault3 cvupgradesensorfirmware out-of-bounds write vulnerability August 9, 2025 CVE Number CVE-2025-25050 SUMMARY An out-of-bounds write vulnerability exists in the cvupgradesensorfirmware functionality of Dell ControlVault3 5.14.3.0. A...
CVE-2025-22470
CL4/6NX Plus and CL4/6NX-J Plus Japan model with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded. An arbitrary Lua script may be executed on the system with the root privilege...
CVE-2025-22470
CL4/6NX Plus and CL4/6NX-J Plus Japan model with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded. An arbitrary Lua script may be executed on the system with the root privilege...
Linux Distros Unpatched Vulnerability : CVE-2025-38387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Initialize objevent-objsublist before xainsert The objevent may be loaded immediately after inserted, then if the listhead is not initialized then we...
PT-2025-31946
Name of the Vulnerable Software and Affected Versions Jointelli 5G CPE 21H01 firmware version 1.36 Description Jointelli 5G CPE 21H01 firmware version 1.36 contains a blind OS command injection issue. Multiple API endpoints are vulnerable, including /ubus/?flag=set WPS pin, /ubus/?flag=netAppStar...
CVE-2025-51390
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function...
CVE-2013-10059
An authenticated OS command injection vulnerability exists in various D-Link routers tested on DIR-615H1 running firmware version 8.04 via the toolsvct.htm endpoint. The web interface fails to sanitize input passed from the pingipaddr parameter to the toolsvct.htm diagnostic interface, allowing...
CVE-2013-10059 D-Link Routers tools_vct.htm OS Command Injection
An authenticated OS command injection vulnerability exists in various D-Link routers tested on DIR-615H1 running firmware version 8.04 via the toolsvct.htm endpoint. The web interface fails to sanitize input passed from the pingipaddr parameter to the toolsvct.htm diagnostic interface, allowing...
AK-Nord USB-Server-LXL Firmware 安全漏洞
AK-Nord USB-Server-LXL Firmware is a specialized firmware software from the German company AK-Nord. A security vulnerability exists in AK-Nord USB-Server-LXL Firmware version v0.0.16 Build 2023-03-13, which originates from improperly set permissions on the /etc/init.d/lighttpd script, which could...
ChargePoint Home Flex 安全漏洞
ChargePoint Home Flex is a series of electric vehicle charging devices from ChargePoint USA. A security vulnerability exists in ChargePoint Home Flex version 5.5.4.13, which originates from an unauthenticated user-controlled bz2 decompression string that could lead to command execution...