PT-2022-21984 · Wavlink · Wavlink Wn530H4

Name of the Vulnerable Software and Affected Versions: Wavlink WN530HG4 version M30HG4.V5030.191116 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/set safety.shtml?r=52300" by searching for the variable syspasswd...

CVE-2009-1561: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd...