2794 matches found
CVE-2025-29522
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function...
CVE-2025-29523
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...
PT-2025-34663 · D Link · Dsl-7740C
Name of the Vulnerable Software and Affected Versions: D-Link DSL-7740C versions DSL7740C.V6.TR069.20211230 Description: The D-Link DSL-7740C device with firmware DSL7740C.V6.TR069.20211230 contains a command injection issue via the ping6 function. Recommendations: At the moment, there is no...
Exploit for CVE-2025-60738
ilevia-EVE-X1-Server ilevia-EVE-X1-Server rce poc;ssrf Aff...
CVE-2025-9248
A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RPpingGatewayByBBS of the file /goform/RPpingGatewayByBBS. The manipulation of the argument ssidhex results in...
CVE-2025-9248 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_pingGatewayByBBS stack-based overflow
A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RPpingGatewayByBBS of the file /goform/RPpingGatewayByBBS. The manipulation of the argument ssidhex results in...
Linux Distros Unpatched Vulnerability : CVE-2022-1319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though...
PT-2025-34158 · Linksys · Linksys Re9000 +5
Name of the Vulnerable Software and Affected Versions: Linksys RE6250 versions 1.0.013.001 through 1.2.07.001 Linksys RE6300 versions 1.0.013.001 through 1.2.07.001 Linksys RE6350 versions 1.0.013.001 through 1.2.07.001 Linksys RE6500 versions 1.0.013.001 through 1.2.07.001 Linksys RE7000 version...
Tigo Energy Cloud Connect Advanced Command Injection Vulnerability
The Tigo Energy Cloud Connect Advanced is a compact data logger from Tigo Energy USA. Tigo Energy Cloud Connect Advanced suffers from a command injection vulnerability due to a flaw in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is invoked. An attacker could exploit the...
Linux Distros Unpatched Vulnerability : CVE-2019-9512
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer,...
CVE-2025-8949
A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function getpingappstat of the file pingresponse.cgi of the component httpd. The manipulation of the argument pingipaddr leads to stack-based buffer overflow. The attack can be launched remotely. The...
Linux Distros Unpatched Vulnerability : CVE-2025-48964
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ping in iputils before 20250602 allows a denial of service application error in adaptive ping mode or incorrect data collection via a crafted ICMP Echo Reply...
Malicious code in vite-plugin-react-ping (npm)
The package vite-plugin-react-ping was found to contain malicious code...
Malicious code in vvite-plugin-react-ping (npm)
The package vvite-plugin-react-ping was found to contain malicious code...
Malicious code in shopify-ping (npm)
The package shopify-ping was found to contain malicious code...
MAL-2025-13168 Malicious code in @zalastax/nolb-ping (npm)
The package @zalastax/nolb-ping was found to contain malicious code...
MAL-2025-38512 Malicious code in vite-plugin-react-ping (npm)
The package vite-plugin-react-ping was found to contain malicious code...
Malicious code in ping-api-ruby (npm)
The package ping-api-ruby was found to contain malicious code...