routopsy

routopsy Routopsy एक टूलकिट है जो अक्सर अनदेखा किए जाने वाले नेटवर्किंग प्रोटोकॉल पर हमला करने के लिए बनाया गया है। Routopsy वर्तमान में डायनामिक रूटिंग प्रोटोकॉल DRP और फ़र्स्ट-हॉप रिडंडेंसी प्रोटोकॉल FHRP के विरुद्ध हमलों का समर्थन करता है। वर्तमान में लागू किए गए अधिकांश हमले प्रोटोकॉल को खरों...

CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...

T3-Technology-CPE-Advisories

T3 Technology CPE — Security Advisories Multiple critical vulnerabilities discovered in T3 Technology CPE ONU/Router devices deployed by TrueOnline Thailand. Vulnerabilities CVE ID| Severity| Summary ---|---|--- CVE-2026-35904| 4.3 Medium| Unauthenticated Telnet Enable via CGI CVE-2026-35905| 8.8...

CVE-2025-59057-PoC

Existe una vulnerabilidad de XSS en las API meta/ de React Router en el Modo Framework al generar etiquetas script:ld+json, lo que podría permitir la ejecución de JavaScript arbitrario durante el SSR si se utiliza contenido no confiable para generar la etiqueta...

CVE-2025-60854

CVE-2025-60854 Vulnerabilidad en D-link AX1500 Recientemente realicé un análisis de vulnerabilidad en un router D-Link y me gustaría documentar mis hallazgos. Modelo objetivo: D-Link AX1500 Versión: 1.20.01 y anteriores El número CVE para este problema está actualmente publicado. La función...

routerfirmwares

Este repositorio no tiene un README...

asus-cmd

ASUS Router infosvr UDP Broadcast root Command Execution Varios modelos de routers de ASUS incluyen un servicio llamado infosvr que escucha en el puerto de broadcast UDP 9999 en la interfaz LAN o WLAN. Lo utiliza una de las herramientas de ASUS para facilitar la configuración del router localizan...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

لا يحتوي هذا المستودع على ملف README...

DIR8xx_PoC

phpcgi phpcgi is responsible for processing requests to .php, .asp and .txt pages. Also, it checks whether a user is authorized or not. Nevertheless, if a request is crafted in a proper way, an attacker can easily bypass authorization and execute a script that returns a login and password to a...

CVE-2026-17255

IBM i versions 7.3 through 7.6 are vulnerable to a denial of service caused by improper validation of the prefix length in ICMPv6 Router Advertisements , classified as CWE-787 (Out-of-bounds Write) . The attack vector is adjacent network with no privileges required, resulting in a CVSS 3.1 score ...

EUVD-2026-71480

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...

CVE-2026-85607 Blinko 1.8.7 Cross-User AI Conversation Read and Write via message tRPC Router

Blinko 1.8.7 contains an authorization bypass IDOR vulnerability in multiple tRPC procedures message.list, message.update, message.delete, message.clearAfter in server/routerTrpc/message.ts and conversation.clearMessages in server/routerTrpc/conversation.ts. Although these procedures require...

CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...

EUVD-2026-71020

Traefik before v2.11.55 contains a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiting shared TLS resolution...

CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 mTLS Bypass via TLS Option Conflict

Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict resolution vulnerability that allows unauthenticated attackers to bypass client-certificate authentication by creating conflicting TLS options on multi-host routers. Attackers can reach protected backends by exploiti...

CVE-2026-85597

Traefik before v2.11.55 is affected by a TLS option conflict resolution vulnerability. When a single router rule contains conflicting TLS options across multiple hostnames, the strict mTLS (client-certificate) requirement falls back to default options for all hosts, allowing unauthenticated attac...

EUVD-2026-70988

fastify versions = 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom not-found handler of a different sibling plugin, and invoke it without the preHandler hook declared for that handler. The internal not-found router for encapsulated handlers dispatches...

TCP-32764

YA NO ACTUALIZARÉ ESTE REPOSITORIO MANUALMENTE Si quieres añadir un router a la lista, por favor haz un pull-request, también recuerda USAR EL POC y pegar el resultado en tu pull-request. Los clientes Telnet y otras soluciones pueden no ser relevantes se han reportado algunos falsos...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue...

CVE-2025-9090

CVE-2025-9090 Author: Byte Reaper Description This exploit targets CVE-2025-9090 , a command injection vulnerability in the Tenda AC20 v16.03.08.12 router. The flaw is in the endpoint /goform/telnet, which can be triggered remotely. When accessed, it starts the Telnet service on the device, openi...