TOTOLINK N300RH buffer overflow vulnerability (CNVD-2026-32745)

TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. The TOTOLINK N300RH has a buffer overflow vulnerability. This vulnerability stems from the setMacFilterRules...

CVE-2026-7750: Buffer Copy without Checking Size of Input

A vulnerability was detected in Totolink N300RH 3.2.4-B20220812. This vulnerability affects the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument macaddress results in buffer overflow. The attack may be launched...

Generex NetMan 204 CVE-2022-47891 - Admin Password Reset

Generex NetMan 204 exposes enough device information to derive the recovery code and reset the administrator password to the default value. from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.netman204 import NetMan204 class ModuleAuxiliary,...

Malicious Package

Overview cafebasicsduo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. The package appears to be part of a larger campaign targeting user credentials. It, and several other variations, masquerade as automation tools for...

CVE-2025-6102: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical was found in Wifi-soft UniBox Controller up to 20250506. Affected by this vulnerability is an unknown functionality of the file /authentication/logout.php. The manipulation of the argument macaddress leads to os command injection. The attack can be launched...

CVE-2018-7233

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'modelname' or 'macaddress'...

CVE-2018-7233: Improper Input Validation

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'modelname' or 'macaddress'...

Schneider Electric Pelco Sarix Professional Command Execution Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...