1652 matches found
CVE-2025-9149
A vulnerability was determined in Wavlink WL-NU516U1 M16U1V240425. This impacts the function sub4032E4 of the file /cgi-bin/wireless.cgi. This manipulation of the argument Guestssid causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclose...
CVE-2025-8958
A vulnerability was identified in Tenda TX3 16.03.13.11multiTDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...
CVE-2025-8958 Tenda TX3 fast_setting_wifi_set stack-based overflow
A vulnerability was identified in Tenda TX3 16.03.13.11multiTDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...
CVE-2025-8958
Summary of CVE-2025-8958 (Tenda TX3) : A stack-based buffer overflow exists in an unknown functionality of the file /goform/fast_setting_wifi_set on Tenda TX3 firmware version 16.03.13.11_multi_TDE01. The vulnerability is triggered by manipulating the ssid parameter and can be exploited remotely....
CVE-2025-8958 Tenda TX3 fast_setting_wifi_set stack-based overflow
A vulnerability was identified in Tenda TX3 16.03.13.11multiTDE01. Affected by this vulnerability is an unknown functionality of the file /goform/fastsettingwifiset. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has be...
CVE-2025-43984
An issue was discovered on KuWFi GC111 devices Hardware Version: CPE-LM321V3.2, Software Version: GC111-GL-LM321V3.020191211. They are vulnerable to unauthenticated /goform/goformsetcmdprocess requests. A crafted POST request, using the SSID parameter, allows remote attackers to execute arbitrary...
PT-2025-33282 · Kuwfi · Kuwfi Gc111
Name of the Vulnerable Software and Affected Versions: KuWFi GC111 versions GC111-GL-LM321 V3.0 20191211 Description: The KuWFi GC111 device is susceptible to unauthorized command execution. A crafted POST request to the /goform/goform set cmd process API endpoint, utilizing the SSID parameter,...
Tenda TX3 安全漏洞
Tenda TX3 is a wireless router from Tenda China. A security vulnerability exists in Tenda TX3 version 16.03.13.11multiTDE01, which originates from a stack buffer overflow due to incorrect operation of the parameter ssid in file /goform/fastsettingwifiset...
CVE-2025-8765
CVE-2025-8765 affects Datacom DM955 5GT 1200 (825.8010.00) and is due to manipulation of the SSID parameter in Wireless Basic Settings, enabling reflected cross-site scripting. The vulnerability is exploitable remotely and exploitation has been disclosed publicly. Impact is limited to confidentia...
Datacom DM955 5GT 代码注入漏洞
The Datacom DM955 5GT is a router from Datacom New Zealand. A code injection vulnerability exists in the Datacom DM955 5GT version 1200 825.8010.00, which stems from improper handling of the parameter SSID and could lead to cross-site scripting attacks...
Linux Distros Unpatched Vulnerability : CVE-2020-36158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mwifiexcmd80211adhocstart in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary co...
Linux Distros Unpatched Vulnerability : CVE-2021-28660
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtwwxsetscan in drivers/staging/rtl8188eu/osdep/ioctllinux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the -ssid array. NOTE: from th...
CVE-2025-50740
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...
CVE-2025-50740
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...
CVE-2025-50740
AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...
UTT Progressive 750W Buffer Overflow Vulnerability (CNVD-2026-02643)
The UTT Progress 750W is an enterprise-grade dual-band wireless router from Atech Technology UTT, which is aimed at SMB network environments. The UTT Progress 750W suffers from a buffer overflow vulnerability that originates from improper handling of the parameter ssid in the file...
Belkin F9K1122 Command Injection Vulnerability
The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a command injection vulnerability that originates from the incorrect operation of the parameters wanipaddr/wannetmask/wangateway/wlssid in the file /goform/formBSSetSitesurvey. An attacker can exploit this vulnerability...
CVE-2025-21449
Transient DOS may occur while processing malformed length field in SSID IEs...