CVE-2023-39063

CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...

Trendnet AC2600 TEW-827DRU - Credentials Disclosure

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. A user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page. id: CVE-2021-20150 info: name: Trendnet AC2600 TEW-827DR...

CVE-2026-122037

The AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 9.2.41 . The root cause is insufficient input sanitization and output escaping of the 'zipcode' par...

CVE-2026-122037 AgenWebsite Shipping <= 9.2.41 - Unauthenticated Stored Cross-Site Scripting via 'zipcode' Parameter via Setup Wizard

The AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'zipcode' parameter in all versions up to, and including, 9.2.41 due to insufficient input sanitization and output escaping. This...

CVE-2026-121933

A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function savesettings of the file /wizard/apply.cgi of the component Setup Wizard. Executing a manipulation of the argument wizardrouterpwd can lead to missing authentication. The attack may be launched remotely. The exploit has...

CVE-2026-121933 Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication

A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function savesettings of the file /wizard/apply.cgi of the component Setup Wizard. Executing a manipulation of the argument wizardrouterpwd can lead to missing authentication. The attack may be launched remotely. The exploit has...

EUVD-2026-117035

A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function savesettings of the file /wizard/apply.cgi of the component Setup Wizard. Executing a manipulation of the argument wizardrouterpwd can lead to missing authentication. The attack may be launched remotely. The exploit has...

CVE-2026-121933

The Linksys E5350 (version 1.0.00.037) contains a vulnerability in the Setup Wizard component, specifically within the save_settings function of the /wizard/apply.cgi file. An attacker can exploit this by manipulating the wizard_router_pwd argument, leading to missing authentication . This vulner...

CVE-2026-121597

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

CVE-2026-121597 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

CVE-2026-121597

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a stack-based buffer overflow within the Easy Setup Wizard Handler component. The flaw exists in the setAppEasyWizardConfig function of the /cgi-bin/cstecgi.cgi file, where manipulating the functionType argument can t...

PT-2026-137104

Name of the Vulnerable Software and Affected Versions Linksys E5350 version 1.0.00.037 Description An authentication bypass exists in the Setup Wizard component. A remote attacker can manipulate the wizard router pwd argument within the save settings function of the '/wizard/apply.cgi' endpoint t...

Linksys E5350 authorization issue vulnerability

The Linksys E5350 running version 1.0.00.037 contains an authorization issue vulnerability. This vulnerability stems from improper handling of the wizardrouterpwd parameter within the savesettings function in the /wizard/apply.cgi file within the Setup Wizard component. It may lead to...

CVE-2026-120195

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function setwzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlanssid leads to os command injection. The attack is...

CVE-2026-120195

A security vulnerability exists in the WAVLINK WL-WN579A3-A (version 2026-03-10-94f93d4) within the Initial Setup Wizard component. The issue is located in the set_wzdgwMesh function of the /cgi-bin/adm.cgi file. Specifically, an OS command injection vulnerability occurs when the wlan_ssid argume...

CVE-2026-120195 WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function setwzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlanssid leads to os command injection. The attack is...

CVE-2026-120195 WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function setwzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlanssid leads to os command injection. The attack is...

EUVD-2026-114767

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function setwzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlanssid leads to os command injection. The attack is...

CVE-2026-120195: WAVLINK WL-WN579A3-A: A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function setwzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlanssid leads to os command injection. The attack is...

PT-2026-134825

Name of the Vulnerable Software and Affected Versions WAVLINK WL-WN579A3-A affected versions not specified Description A remote OS command injection exists within the Initial Setup Wizard component. The issue occurs when the set wzdgwMesh function in the '/cgi-bin/adm.cgi' endpoint fails to...