45 matches found
CVE-2025-63462
Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the wifiOff parameter in the sub421A04 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63460
Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub4222E0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63465
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub422880 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
PT-2025-44659
Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description The software contains a stack overflow issue via the wifiOff parameter in the sub 4232EC function. This allows attackers to cause a Denial of Service DoS through a crafted request...
PT-2025-44653
Name of the Vulnerable Software and Affected Versions Totolink LR350 version 9.3.5u.6369 B20220309 Description The software contains a stack overflow issue via the ssid parameter in the sub 422880 function. This can allow attackers to cause a Denial of Service DoS through a crafted request...
CVE-2025-41704
CVE-2025-41704 describes an unauthenticated DoS against the Modbus service by sending a crafted function and sub-function code. Public sources constrain affected products to Phoenix Contact and related QUINT4 modules, with references indicating multiple QUINT4-UPS/24DC/24DC/5/EIP, 10/EIP, and 20/...
The vulnerability of the sub_46409C() function in the D-Link DI-7100G router’s microprogramming software, as described in the file /msp_info.htm?flag=qos, allows a hacker to execute arbitrary commands.
The vulnerability of the sub46409C function in the /mspinfo.htm?flag=qos file of the D-Link DI-7100G router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...
PT-2025-41854
Name of the Vulnerable Software and Affected Versions Modbus affected versions not specified Description An unauthenticated remote attacker can cause a denial of service DoS condition affecting the Modbus service. This is achieved by sending a specific function and sub-function code. The core...
EUVD-2025-29076
Malicious code in bioql PyPI...
EUVD-2023-50633
Malicious code in bioql PyPI...
The vulnerability of the sub_401C5C() function (firewall.cgi) of the WAVLINK WL-WN578W2 signal booster software allows a perpetrator to execute arbitrary commands.
The vulnerability of the sub401C5C function firewall.cgi in the WAVLINK WL-WN578W2 signal booster software is related to the failure to take measures to neutralize specific elements when processing parameters such as pingFrmWANFilterEnabled, blockSynFloodEnabled, blockPortScanEnabled, and...
CVE-2025-10323 Wavlink WL-WN578W2 wizard_rep.shtml sub_409184 command injection
A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub409184 of the file /wizardrep.shtml. The manipulation of the argument selEncrypTyp results in command injection. The attack may be performed from remote. The exploit has been made public and could be...
CVE-2025-9934
A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415B20250515. This affects the function sub410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and...
PT-2025-35587
Name of the Vulnerable Software and Affected Versions: Tenda CP6 version 11.10.00.243 Description: A vulnerability exists in the function sub 2B7D04 of the uhttp component. Manipulation of this function can lead to a risky cryptographic algorithm. This attack can be launched remotely and is...
CVE-2025-9089
A vulnerability was determined in Tenda AC20 16.03.08.12. This issue affects the function sub48E628 of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and...
The vulnerability of the sub_43fdcc function (/goform/SetNetControlList) in the Wi-Fi router software Tenda AX12 allows a hacker to trigger a service failure.
The vulnerability of the sub43fdcc function /goform/SetNetControlList in the Wi-Fi router software Tenda AX12 is related to the operation of writing data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from disableslot repeating pcidevput when PF has a sub-VF in s390/pci...
CVE-2025-4340
A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed t...
WCMS 代码问题漏洞
WCMS is a content management system CMS by the individual developers at Vedegis. A code issue vulnerability exists in WCMS version 11, which stems from a function sub in the file app/admin/AdvadminController.php that results in unlimited uploads...