CVE-2023-36146

CVE-2023-36146 PoC of CVE-2023-36146 - Multilaser RE 170 Firmware 2.2.6733 Authenticated stored Cross Site Scripting Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to Security IP Filtering 3. In the "Description" field inject the payload "" 4. Click Add 5. Exploit!...

m7s-root

M7S Rooting Toolkit Permanent root for the Multilaser M7S...

Multilaser Pro Setup Page - Detect

This allows the user to access quick setup settings and configuration page through /wizard.htm. !/usr/bin/env python3 -- coding: utf-8 -- """This allows the user to access quick setup settings and configuration page through /wizard.""" from kittysploit import from lib.protocols.http.httpclient...

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

EUVD-2023-12691

Malicious code in bioql PyPI...

EUVD-2023-40125

Malicious code in bioql PyPI...

EUVD-2025-16626

Malicious code in bioql PyPI...

EUVD-2025-16619

Malicious code in bioql PyPI...

CVE-2025-5437

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2025-5437

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2025-5437 Multilaser Sirius RE016 Password Change cstecgi.cgi improper authentication

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2025-5437

The CVE-2025-5437 vulnerability affects Multilaser Sirius RE016 MLT1.0 in the Password Change Handler component, specifically the file /cgi-bin/cstecgi.cgi. The issue arises from manipulation of an unknown function, causing improper authentication. It can be exploited remotely and exploits have b...

CVE-2025-5437 Multilaser Sirius RE016 Password Change cstecgi.cgi improper authentication

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

CVE-2025-5436

A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-5436

CVE-2025-5436 affects Multilaser Sirius RE016 MLT1.0. The issue occurs in the CGI endpoint /cgi-bin/cstecgi.cgi, where processing of the file can be manipulated to disclose information. Exploitation is described as remote, with the exploit publicly disclosed. A mitigation is to temporarily disabl...

CVE-2025-5436 Multilaser Sirius RE016 cstecgi.cgi information disclosure

A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-5436 Multilaser Sirius RE016 cstecgi.cgi information disclosure

A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-5437: Improper Authentication

A vulnerability classified as critical has been found in Multilaser Sirius RE016 MLT1.0. Affected is an unknown function of the file /cgi-bin/cstecgi.cgi of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

Multilaser Sirius RE016 Access Control Vulnerability

The Multilaser Sirius RE016 is a networking device from Multilaser Sirius. An access control error vulnerability exists in Multilaser Sirius RE016 MLT version 1.0, which originates in the file /cgi-bin/cstecgi.cgi leading to information disclosure...

PT-2025-23481 · Multilaser · Multilaser Sirius Re016 Mlt1.0

Name of the Vulnerable Software and Affected Versions: Multilaser Sirius RE016 MLT1.0 Description: A critical issue has been found in the Password Change Handler component, specifically in the /cgi-bin/cstecgi.cgi file. The manipulation of an unknown function leads to improper authentication,...