Mitel 6000 - OS Command Injection

A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones through 6.4 SP4 R6.4.0.4006, and the 6970 Conference Unit through 6.4 SP4 R6.4.0.4006 or version V1 R0.1.0, could allow an unauthenticated attacker to conduct a command injection attack due to insufficient paramete...

Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass

Zyxel NBG2105 V1.00AAGU.2C0 devices are susceptible to authentication bypass vulnerabilities because setting the login cookie to 1 provides administrator access. id: CVE-2021-3297 info: name: Zyxel NBG2105 V1.00AAGU.2C0 - Authentication Bypass author: gy741 severity: high description: Zyxel NBG21...

ZTE Cable Modem Web Shell

ZTE F460 and F660 cable modems allows remote attackers to obtain administrative access via sendcmd requests to webshellcmd.gch, as demonstrated by using "set TelnetCfg" commands to enable a TELNET service with specified credentials. id: CVE-2014-2321 info: name: ZTE Cable Modem Web Shell author:...

D-Link DIR-823X set_prohibiting - Command Injection

D-Link DIR-823X 240126 and 240802 contain a command injection caused by sending a POST request to /goform/setprohibiting, letting an authorized attacker execute arbitrary commands remotely, exploit requires attacker to be authorized. id: CVE-2025-29635 info: name: D-Link DIR-823X setprohibiting -...

NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure

NETGEAR DGN2200 / DGND3700 is susceptible to a vulnerability within the page 'BSWcxttongr.htm' which can allow a remote attacker to access this page without any authentication. The attacker can then use this password to gain administrator access of the targeted router's web interface. id:...

Xiaomi Mi WiFi R3G Routers - Local file Inclusion

Xiaomi Mi WiFi R3G devices before 2.28.23-stable are susceptible to local file inclusion vulnerabilities via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/config/account. With this vulnerability, the attacker can bypass authentication. id: CVE-2019-18371...

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution

SEOWON INTECH SLC-130 and SLR-120S devices allow remote code execution via the ipAddr parameter to the systemlog.cgi page. id: CVE-2020-17456 info: name: SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution author: gy741,edoardottt severity: critical description: SEOWON INTECH...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

ASUS DSL-AC88U - Authentication Bypass

A vulnerability in the ASUS DSL-AC88U router permits unauthorized individuals to bypass authentication.When adding "/js/..%2f%2f" or "/images/..%2f%2e" to the requested URL, it will be recognized as passing the authentication.This vulnerability is part of a broader authentication bypass issue...

zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri

CVE-2026-10672 — Prueba de Concepto de Lectura Fuera de Límites en la Actualización de Firmware LwM2M de Zephyr Prueba de concepto para CVE-2026-10672 , una lectura fuera de límites en el cliente de extracción de actualización de firmware LwM2M de Zephyr RTOS...

PcanExploit

CVE-2024-44610: PEAK PCAN-Ethernet Gateway FD DR Authenticated Root Exploit What is it? This repository contains a Proof-of-Concept PoC exploit that executed code as root on Peak Ethernet gateways. It requires that you know the credentials to the web interface. How to fix it? The vendor has rapid...

ASUS GT-AC2900 - Authentication Bypass

ASUS GT-AC2900 devices before 3.0.0.4.386.42643 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator application. This relates to handlerequest in router/httpd/httpd.c and authcheck in webhook.o. An...

routers-exploit

OpenSource-репозиторий с PoC и уязвимостями, найденными в роутерах TP LINK TL-WR849N - PoC удаленного выполнения команд CVE-2020-9374 - TP LINK TL-WR849N - PoC удаленного выполнения команд root@kitploit: Полезная нагрузка: "$ls" TP LINK TL-WR849N - Обход аутентификации: обновление прошивки и...

CVE-2026-73673

CVE-2026-73673: Netis NC63 अनधिकृत फर्मवेयर अपडेट जिसमें क्रिप्टोग्राफिक फर्मवेयर प्रमाणीकरण का अभाव है मूल भेद्यता अनुसंधान Özcan Ersan @ozcanpng द्वारा। यह रिपॉजिटरी CVE-2026-73673 का दस्तावेजीकरण करती है, जिसे लेखक द्वारा खोजा और रिपोर्ट किया गया। CVE-2026-73673 के लिए गैर-विनाशकारी...

CVE-2023-33768

CVE-2023-33768 Descrizione La verifica errata della firma del firmware durante il processo di Device Firmware Update di Belkin Wemo Smart Plug WSP080 v1.2 consente agli attaccanti di causare un Denial of Service DoS tramite un file firmware appositamente modificato. Informazioni aggiuntive Durant...

Arlo

Arlo Estrai i binari eseguibili dal dump e dagli aggiornamenti Arlo Vedi il blog post su https://www.synacktiv.com/publications/arlo-im-watching-you Parser arlo.py viene utilizzato per analizzare un dump di memoria Flash, scaricare e analizzare gli aggiornamenti o elencare i modelli noti. Richied...

internet-of-vulnerable-things

Internet delle Cose Vulnerabili I risultati del mio piccolo elaborato sul tema dell'Internet delle Cose Vulnerabili. Abstract Questo documento fornisce una dimostrazione pratica di quanto sia insicura l'Internet delle Cose, hackingando un tipico dispositivo IoT. Sono state identificate diverse...

CVE-2023-51073

CVE-2023-51073 - Schwachstelle in der Firmware-Update-Server-Verifizierung beim Buffalo LS210D Version 1.78-0.03 Christopher J. Pace und Ryan Miller Der Buffalo LS210D ist ein Network Attached Storage NAS-Server, der für kleine Unternehmen und Privatpersonen entwickelt und vermarktet wird. Der...

D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure

D-Link DCS-2530L before 1.06.01 Hotfix and DCS-2670L through 2.02 devices are vulnerable to password disclosures vulnerabilities because the /config/getuser endpoint allows for remote administrator password disclosure. id: CVE-2020-25078 info: name: D-Link DCS-2530L/DCS-2670L - Administrator...