CVE-2025-2213 Castlenet CBW383G2N Wireless Menu wlanPrimaryNetwork.asp cross site scripting

A vulnerability was found in Castlenet CBW383G2N up to 20250301. It has been declared as problematic. This vulnerability affects unknown code of the file /wlanPrimaryNetwork.asp of the component Wireless Menu. The manipulation of the argument SSID with the input leads to cross site scripting. The...

Castlenet CBW383G2N 代码注入漏洞

The Castlenet CBW383G2N is a hardware device from Castlenet, Inc. A code injection vulnerability exists in Castlenet CBW383G2N 20250301 and earlier versions, which stems from the fact that incorrect manipulation of the parameter SSID can lead to cross-site scripting attacks...

The vulnerability of TP-LINK TL-WR841ND router’s microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to cause a malfunction in the device.

The vulnerability of TP-LINK’s TL-WR841ND router’s microprogramming software lies in the fact that the operation is performed outside the buffer in memory when processing the ssid parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially craft...

Tenda AC10 Buffer Overflow Vulnerability (CNVD-2025-09218)

The Tenda AC10 is a wireless router from the Chinese company Tenda. Tenda AC10 suffers from a buffer overflow vulnerability, which originates from the ssid parameter of formfastsettingwifiset contains a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2023-52424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IEEE 802.11 standard sometimes enables an adversary to trick a victim into connecting to an unintended or untrusted network with Home WEP, Home WPA3 SAE-loo...

TRENDnet TEW-929DRU 安全漏洞

The TRENDnet TEW-929DRU is a wireless router from TRENDnet. The TRENDnet TEW-929DRU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the ssid key of the wifidata parameter on the /captiveportal.htm page, which...

SUSE CVE-2022-49405

In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the -Ssid array...

CVE-2022-49533

In the Linux kernel, the following vulnerability has been resolved: ath11k: Change max no of active probe SSID and BSSID to fw capability The maximum number of SSIDs in a for active probe requests is currently reported as 16 WLANSCANPARAMSMAXSSID when registering the driver. The scanreqparams...

CVE-2022-49405

In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the -Ssid array...

DEBIAN-CVE-2022-49405

In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the -Ssid array...

UBUNTU-CVE-2022-49405

In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the -Ssid array...

CVE-2022-49533

CVE-2022-49533 relates to the Linux kernel ath11k driver, where a buffer overflow could occur while copying SSIDs into the scan_req_params structure during hardware scanning. The root cause is the mismatch between the number of SSIDs supported (16) and the structure’s capacity (10), potentially a...

CVE-2022-49533 ath11k: Change max no of active probe SSID and BSSID to fw capability

In the Linux kernel, the following vulnerability has been resolved: ath11k: Change max no of active probe SSID and BSSID to fw capability The maximum number of SSIDs in a for active probe requests is currently reported as 16 WLANSCANPARAMSMAXSSID when registering the driver. The scanreqparams...

CVE-2022-49405 staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the -Ssid array...

CVE-2022-49405

CVE-2022-49405 affects the Linux kernel staging/r8188eu driver (rtw_wx_set_scan). The vulnerability arises from insufficient bounds checking for the Ssid[] array, allowing a write beyond the end of the array after an existing read-overflow check. Multiple connected sources indicate the issue was ...

CVE-2022-49405 staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()

In the Linux kernel, the following vulnerability has been resolved: staging: r8188eu: prevent -Ssid overflow in rtwwxsetscan This code has a check to prevent read overflow but it needs another check to prevent writing beyond the end of the -Ssid array...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from staging: r8188eu in rtwwxsetscan could lead to a -Ssid overflow...

PT-2025-8339 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, specifically in the staging driver r8188eu. The issue is related to the function rtw wx set scan, where there is a potential fo...

CVE-2025-1617

This CVE concerns Netis WF2780 devices (2.1.41925) with a cross-site scripting flaw in the Wireless 2.4G Menu SSID parameter. The vulnerability arises from improper handling of the SSID argument, enabling remote initiation of an attack. Exploitation details are limited in the provided documents, ...

CVE-2025-1612

A vulnerability was found in Edimax BR-6288ACL 1.30. It has been declared as problematic. This vulnerability affects unknown code of the file wireless5gbasic.asp. The manipulation of the argument SSID leads to cross site scripting. The attack can be initiated remotely. The vendor was contacted...