CVE-2024-36111

KubePi is a K8s panel. Starting in version 1.6.3 and prior to version 1.8.0, there is a defect in the KubePi JWT token verification. The JWT key in the default configuration file is empty. Although a random 32-bit string will be generated to overwrite the key in the configuration file when the ke...

Design/Logic Flaw

The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...

CVE-2020-14098: Improper Synchronization

The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...

PT-2021-9688

Name of the Vulnerable Software and Affected Versions Xiaomi router AX1800 rom versions prior to 1.0.336 Xiaomi router RM1800 root versions prior to 1.0.26 Description The issue allows the login verification to be bypassed due to a problem with time synchronization after the router restarts...