3253 matches found
PT-2025-34656 · D Link · Dsl-7740C
Name of the Vulnerable Software and Affected Versions: D-Link DSL-7740C versions DSL7740C.V6.TR069.20211230 Description: The D-Link DSL-7740C device with firmware DSL7740C.V6.TR069.20211230 contains a command injection issue via the ping function. Recommendations: At the moment, there is no...
Exploit for CVE-2025-60738
ilevia-EVE-X1-Server ilevia-EVE-X1-Server rce poc;ssrf Aff...
CVE-2025-9248
A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RPpingGatewayByBBS of the file /goform/RPpingGatewayByBBS. The manipulation of the argument ssidhex results in...
CVE-2025-9248 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_pingGatewayByBBS stack-based overflow
A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. The impacted element is the function RPpingGatewayByBBS of the file /goform/RPpingGatewayByBBS. The manipulation of the argument ssidhex results in...
Linux Distros Unpatched Vulnerability : CVE-2022-1319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though...
Tigo Energy Cloud Connect Advanced Command Injection Vulnerability
The Tigo Energy Cloud Connect Advanced is a compact data logger from Tigo Energy USA. Tigo Energy Cloud Connect Advanced suffers from a command injection vulnerability due to a flaw in the /cgi-bin/mobileapi endpoint when the DEVICEPING command is invoked. An attacker could exploit the...
Linux Distros Unpatched Vulnerability : CVE-2019-9512
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer,...
CVE-2025-8949
A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function getpingappstat of the file pingresponse.cgi of the component httpd. The manipulation of the argument pingipaddr leads to stack-based buffer overflow. The attack can be launched remotely. The...
Linux Distros Unpatched Vulnerability : CVE-2025-48964
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ping in iputils before 20250602 allows a denial of service application error in adaptive ping mode or incorrect data collection via a crafted ICMP Echo Reply...
Malicious code in @zalastax/nolb-ping (npm)
The package @zalastax/nolb-ping was found to contain malicious code...
Malicious code in ping-api-ruby (npm)
The package ping-api-ruby was found to contain malicious code...
Malicious code in ping-reductions (npm)
The package ping-reductions was found to contain malicious code...
Malicious code in shopify-ping (npm)
The package shopify-ping was found to contain malicious code...
Malicious code in tanjiro-ping-bot (npm)
The package tanjiro-ping-bot was found to contain malicious code...
Malicious code in vvite-plugin-react-ping (npm)
The package vvite-plugin-react-ping was found to contain malicious code...
MAL-2025-34538 Malicious code in tanjiro-ping-bot (npm)
The package tanjiro-ping-bot was found to contain malicious code...
MAL-2025-33135 Malicious code in shopify-ping (npm)
The package shopify-ping was found to contain malicious code...
MAL-2025-29263 Malicious code in ping-reductions (npm)
The package ping-reductions was found to contain malicious code...