447 matches found
CVE-2025-9961
CVE-2025-9961 TP-Link AX10/AX1500 CWMP Buffer Overflow RCE Overview Stack-based buffer overflow in CWMP TR-069 leading to remote code execution. Field| Value ---|--- Product| TP-Link AX10, AX1500 Affected| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC...
CVE-2026-4255
CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading Privilege Escalation Severity: HIGH CVSS 8.4 CWE: CWE-829 Inclusion of Functionality from Untrusted Control Sphere Published: 16/03/2026 CNA: Toreon Affected versions: Thermalright TR-VISION HOME ≤ 2.0.5 Windows 64-bit Discovered by: Ard3...
zyxel-vmg8825-keygen
Zyxel VMG8825-T50 Supervisor Keygen In this project contains the following functions implemented in Python 3: Function name| Validity ---|--- zcfgBeCommonGenKeyBySerialNumCBT | ❓ zcfgBeCommonGenKeyBySerialNumMethod2 | ✅ zcfgBeCommonGenKeyBySerialNumMethod3 | ✅...
CLEANSTART-2023-CZ33666 ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "t...
Security vulnerability affects the zoneminder package. ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability XSS by backing out of the current "tr" "td" brackets...
CVE-2026-2035703-x300
CVE-2026-108576: Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station Status: Published — coordinated disclosure via CISA ICS and CERT/CC Discovered: 2026-08-08 Researcher: Muhammad Nadeem Danish danish1162 CVE ID: CVE-2026-108576 assigned by VulDB CNA, published on cve.o...
f609-brute
f609-brute f609-brute is a simple brute force tool for Telkom Indonesia's ZTE F609 routers. Hence Telkom Indonesia implements TR-069 to ZTE F609 modems, they routinely update admin password. f609-brute is running on Python 2.7. Usage usage: python f609.py Example Usage python f609.py...
Housekeeping-PoC
Housekeeping A two stage bootloader unlock exploit for JSTB...
CWMP/TR-069 Protocol Code Execution Root Privileges
The vulnerability of the CWMP/TR-069 protocol implementation of TP-Link Archer VX1800v V1 software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...
EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2026-3450)
According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including...
Malicious code in noblox-asset.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d897fe6a57fc9f74c5dd46a89603da107c43ad60d3854a86987d67f5702973 noblox-asset.js impersonates the noblox.js Roblox API wrapper: package.json copies the legitimate package's description, homepage...
...[ More ]
Tozed ZLT X300 5G CPE Router firmware version 6.01.3 contains an OS command injection vulnerability in the TR-069/CWMP client daemon netcwmpd. The IPPingDiagnostics Host parameter is passed unsanitized into sprintf, which constructs a shell command executed via systembyroot as root. An attacker...
Malicious code in @zalastax/nolb-react-tr (npm)
The package @zalastax/nolb-react-tr was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in @zalastax/nolb-cra-tr (npm)
The package @zalastax/nolb-cra-tr was found to contain malicious code. --- Credit: OpenSSF source...
CVE-2026-15427
An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069...
CVE-2026-15428 OS Command Injection in TR-069 (CWMP) Management Interface in TP-Link Archer VX1800v
An OS command injection vulnerability exists in Archer VX800v v1 due to insufficient input sanitization of the domain name parameter. An adjacent attacker who can access the relevant HTTP interface can modify the parameter to inject shell metacharacters, resulting in arbitrary code execution with...
tr.Next() Container DoS
The vulnerability of the tr.Next method in container management systems and the Incus virtual machine manager is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2026-15427: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the TR-069 / CWMP management interface of Archer VX1800v v1 due to insufficient input validation and sanitization of parameters, allowing crafted input to be executed as system-level commands. Exploitation requires specific conditions such as TR-069...
CVE-2026-8665
OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command construction...
CVE-2026-8665: Improper Neutralization of Special Elements used in an OS Command
OS Command Injection vulnerability in the TR action of Rapid7 InsightConnect Translate Plugin on Linux allows remote attackers to execute arbitrary OS commands via the text or expression parameters due to insufficient input sanitization in shell command construction...