Exploit for CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable t...

CVE-2025-44894

CVE-2025-44894 affects FW-WGS-804HPT v1.305b241111. A stack overflow is triggered via the radDftParamKey parameter in the web_radiusSrv_dftParam_post function. The CVE is rated CVSSv3.1 likely high impact (Confidentiality/Integrity/Availability high) with network attack vector and no privileges r...

PLANET FW-WGS-804HPT 安全漏洞

PLANET FW-WGS-804HPT is a wall-mounted managed switch from PLANET China. A security vulnerability exists in PLANET FW-WGS-804HPT v1.305b241111, which originates from a stack overflow in the hostip parameter of the websnmpv3hostaddpost function...

CVE-2025-28371

EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function. The device fails to validate the current password, allowing an attacker to submit a password change request with an invalid current password and set a new password...

CVE-2025-28371

EnGenius ENH500 AP 2T2R V3.0 FW3.7.22 is vulnerable to Incorrect Access Control via the password change function. The device fails to validate the current password, allowing an attacker to submit a password change request with an invalid current password and set a new password...

📄 ABB Cylon FLXeon 9.3.5 siteGuide.js Authenticated Directory Traversal

The ABB Cylon FLXeon BACnet controller is vulnerable to authenticated file traversal via the /api/siteGuide endpoint. An attacker with valid credentials can manipulate the filename parameter to move and access or overwrite arbitrary files. The issue arises due to improper input validation in...

ABB Cylon FLXeon 9.3.5 (siteGuide.js) Authenticated Root Remote Code Execution

Summary BACnet® Smart Building Controllers. ABB's BACnet portfolio features a series of BACnet® IP and BACnet MS/TP field controllers for ASPECT® and INTEGRA™ building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...

CVE-2025-45864

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface...

CVE-2025-45859

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the bandstr parameter in the formMapDelDevice interface...

CVE-2021-31895

A vulnerability has been identified in RUGGEDCOM i800 All versions V4.3.7, RUGGEDCOM i801 All versions V4.3.7, RUGGEDCOM i802 All versions V4.3.7, RUGGEDCOM i803 All versions V4.3.7, RUGGEDCOM M2100 All versions V4.3.7, RUGGEDCOM M2200 All versions V4.3.7, RUGGEDCOM M969 All versions V4.3.7,...

CVE-2025-28203

Victure RX1800 ENV1.0.0r12110933 was discovered to contain a command injection vulnerability...

CVE-2025-28200

Victure RX1800 ENV1.0.0r12110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address...

Victure RX1800 安全漏洞

The Victure RX1800 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 ENV1.0.0r12110933 version that stems from the use of a weak default password...

Victure RX1800 安全漏洞

The Victure RX1800 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 ENV1.0.0r12110933 version that originates from a physical neighbor attacker can execute arbitrary code or gain root access...

VulnCheck KEV: CVE-2024-57049

A vulnerability in the TP-Link Archer c20 router with firmware version V6.6230412 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory. When adding Referer: http://tplinkwifi.net to the the request, it will be recognized as passing...

CVE-2025-45797

TOTOlink A950RG V4.1.2cu.5204B20210112 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the NoticeUrl parameter in the setNoticeCfg interface of /lib/cstemodules/system.so...

CVE-2025-45788

TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the comment parameter in setMacFilterRules...

CVE-2025-45790

TOTOLINK A3100R V5.9c.1527 is vulnerable to Buffer Overflow via the priority parameter in the setMacQos interface of /lib/cstemodules/firewall.so...

CVE-2025-45845

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function...

CVE-2024-57233

NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...