Tenda F1202 缓冲区错误漏洞

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeUrlFilter method...

Tenda F1202 缓冲区错误漏洞

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability exists in the Tenda F1202 prior to version V1.0BRV1.2.0.20, which stems from a buffer overflow on the page page of the fromSafeClientFilter method...

Tenda F1202 缓冲区错误漏洞

The Tenda F1202 is a dual-band Wi-Fi router with fifth-generation technology from Tenda China. A security vulnerability previously existed in the Tenda F1202 V1.0BRV1.2.0.20, which was caused by a buffer overflow in the page page of the fromNatStaticSetting method...

CVE-2023-29156

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID ODID messages which force the DroneScout ds230 Remote ID...

Default configuration

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID ODID messages which force the DroneScout ds230 Remote ID...

CVE-2023-29156 Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID ODID messages which force the DroneScout ds230 Remote ID...

CVE-2023-29156 Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations

DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID ODID messages which force the DroneScout ds230 Remote ID...

Exploit for Race Condition in Qualcomm Apq8053_Firmware

Fork My adaptation for the SM-F926U from the original exploit...

CVE-2023-37703

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speeddir parameter in the formSetSpeedWan function...

Tenda FH1203 缓冲区错误漏洞

Tenda FH1203 is a dual-band wireless router from China's Tenda, mainly used for home network coverage and enhancement. The Tenda FH1203 suffers from a stack buffer overflow vulnerability that originates from the page parameter of the fromAddressNat method failing to properly validate the length o...

CVE-2023-37170

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain an unauthenticated remote code execution RCE vulnerability via the lang parameter in the setLanguageCfg function...

CVE-2023-37171

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function...

CVE-2023-37171

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function...

TOTOLINK LR350 命令注入漏洞

TOTOLINK LR350 is a wireless router from China Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK LR350 version V9.3.5u.6369B20220309. An attacker can exploit this vulnerability to conduct a command injection attack via the ussd parameter of the setUssd method...

PT-2023-5090 · Milesight · Milesight Ur32L

Name of the Vulnerable Software and Affected Versions: Milesight UR32L version 32.3.0.5 Description: The issue is caused by a buffer overflow vulnerability in the handle interface acl function of the Milesight UR32L router's firmware. This vulnerability can be exploited by a remote attacker to...

Milesight UR32L 缓冲区错误漏洞

The Milesight UR32L is a 4G industrial router from China's StarZone IOT Milesight. A buffer error vulnerability exists in the Milesight UR32L v32.3.0.5, which stems from the use of an insecure sprintf pattern. An attacker could exploit the vulnerability to cause a buffer overflow via a specially...

D-Link DIR-823G 'EXCU_SHELL' RCE Vulnerability - Active Check

D-Link DIR-823G Routers are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-Link DIR-823G Multiple Vulnerabilities (2023 - 2025)

D-Link DIR-823G devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DAP-1325 Insecure Direct Object Reference

Exploit Title: D-Link DAP-1325 - Broken Access Control Date: 27-06-2023 Exploit Author: ieduardogoncalves Contact : twitter.com/0x00dia Vendor : www.dlink.com Version: Hardware version: A1 Firmware version: 1.01 Tested on:All Platforms 1 Description Security vulnerability known as "Unauthenticate...

PT-2023-8183 · Zyxel · Zyxel Nas326 +1

Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 firmware version V5.21AAZF.14C0 Zyxel NAS542 firmware version V5.21ABAG.11C0 Description: The issue is related to the improper neutralization of special elements in the CGI program of the Zyxel NAS326 and NAS542 firmware. This...