846 matches found
CVE-2024-45261
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID generated for a specific user is not tied to that user itself, which allows other users to potentially use it for authentication. Once an attacker bypasses the application's...
CVE-2024-45262
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The params parameter in the call method of the /rpc endpoint is vulnerable to arbitrary directory traversal, which enables attackers to execute scripts under any path...
CVE-2024-45260
An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users who belong to unauthorized groups can invoke any interface of the device, thereby gaining complete control over it...
CVE-2023-31471
An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install...
CVE-2023-31476
An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an empty file can be created almost anywhere on the filesystem, as long as the filename and path is no more than 6 characters the working directory is /www...
CVE-2023-24261
A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request...
CVE-2020-15500
An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflected XSS...
The vulnerability of the administrator panel of microprogrammed software routers such as GL-A1300, GL-AX1800, GL-AXT1800, GL-MT3000, GL-MT2500, GL-MT6000, GL-MT1300, GL-MT300N-V2, GL-AR750S, GL-AR750, GL-AR300M, and GL-B1300 allows attackers to circumvent security restrictions, gain increased privileges, and obtain full control over the device.
The vulnerability of the administrator panel of microprogrammed software routers such as GL-A1300, GL-AX1800, GL-AXT1800, GL-MT3000, GL-MT2500, GL-MT6000, GL-MT1300, GL-MT300N-V2, GL-AR750S, GL-AR750, GL-AR300M, and GL-B1300 is related to deficiencies in authentication procedures. Exploiting this...
Multiple vulnerabilities in GL-MT2500 and GL-MT2500A
Overview GL-MT2500 and GL-MT2500A provided by GL.iNet contains multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2024-57391 Inefficient regular expression complexity CWE-1333 - CVE-2025-2811 Chuya Hayakawa and Ryo Kamino of 00One, Inc. reported these vulnerabilities to...
PT-2025-20604 ยท Undefined ยท Undefined
โ ๏ธ Vulnerability Alert: Multiple vulnerabilities in GL-MT2500 and GL-MT2500A ๐ Timeline: Not provided ๐ cveId: CVE-2024-57391 ๐ baseScore: 7.2 ๐ cvssMetrics: AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H cvssSeverity: High ๐ ๐ EPSS Percentile: Not available ๐ ๏ธ...
mod3d-gl (>=0.1.0, <=0.2.0), mod3d-gltf (>=0.1.0, <=0.2.0) +1 more potentially affected by unknown CVE via mod3d-base (>=0.1.0, <=0.2.0)
mod3d-base CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0171...
GHSA-75V8-2H7P-7M2M vulnerabilities
Vulnerabilities for packages: tileserver-gl...
CVE-2025-46653 vulnerabilities
Vulnerabilities for packages: tileserver-gl...
CVE-2025-46653 vulnerabilities
Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips...
GHSA-75V8-2H7P-7M2M vulnerabilities
Vulnerabilities for packages: tileserver-gl, tileserver-gl-fips...
GL.iNet Router ๅฎๅ จๆผๆด
GL.iNet Router is a series of routers from China's Guanglian Zhitong GL.iNet company. A security vulnerability exists in GL.iNet Router that originates from a buffer overflow in the plugins.so file of the RPC Handler component...
CVE-2024-12905 vulnerabilities
Vulnerabilities for packages: tileserver-gl, code-server, sqlpad...
GHSA-PQ67-2WWV-3XJX vulnerabilities
Vulnerabilities for packages: tileserver-gl, code-server, sqlpad...