17 matches found
EUVD-2025-24818
Malicious code in bioql PyPI...
EUVD-2025-24639
Malicious code in bioql PyPI...
CVE-2025-43984
An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...
CVE-2025-43986
An issue was discovered on KuWFi GC111 GC111-GL-LM321V3.020191211 devices. The TELNET service is enabled by default and exposed over the WAN interface without authentication...
CVE-2025-43984
An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...
CVE-2025-43984
An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...
KuWFi GC111 安全漏洞
KuWFi GC111 is a WiFi router from KuWFi China. A security vulnerability exists in the KuWFi GC111 that stems from improper handling of unauthenticated requests and could lead to the execution of arbitrary OS commands...
CVE-2025-43984: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...
CVE-2025-43984
An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...
PT-2025-33282 · Kuwfi · Kuwfi Gc111
Name of the Vulnerable Software and Affected Versions: KuWFi GC111 versions GC111-GL-LM321 V3.0 20191211 Description: The KuWFi GC111 device is susceptible to unauthorized command execution. A crafted POST request to the /goform/goform set cmd process API endpoint, utilizing the SSID parameter,...
CVE-2025-43984
The KuWFi GC111 router (Hardware Version: CPE-LM321_V3.2 , Software Version: GC111-GL-LM321_V3.0_20191211 ) is vulnerable to an unauthenticated OS command injection vulnerability. A crafted POST request to the /goform/goform_set_cmd_process API endpoint, specifically targeting the SSID parameter,...
CVE-2025-43986
An issue was discovered on KuWFi GC111 GC111-GL-LM321V3.020191211 devices. The TELNET service is enabled by default and exposed over the WAN interface without authentication...
CVE-2025-43986
An issue was discovered on KuWFi GC111 GC111-GL-LM321V3.020191211 devices. The TELNET service is enabled by default and exposed over the WAN interface without authentication...
CVE-2025-43986
The KuWFi GC111 GC111-GL-LM321_V3.0_20191211 devices are vulnerable because the TELNET service is enabled by default and exposed over the WAN interface without any authentication. This exposure allows unauthorized actors to access the service, potentially leading to a compromise of the device. To...
KuWFi GC111 安全漏洞
KuWFi GC111 is a WiFi router from KuWFi China. A security vulnerability exists in KuWFi GC111 GC111-GL-LM321V3.020191211, which stems from TELNET service being enabled by default and unauthenticated...
CVE-2025-43986
An issue was discovered on KuWFi GC111 GC111-GL-LM321V3.020191211 devices. The TELNET service is enabled by default and exposed over the WAN interface without authentication...
CVE-2025-43986: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered on KuWFi GC111 GC111-GL-LM321V3.020191211 devices. The TELNET service is enabled by default and exposed over the WAN interface without authentication...