CVE-2022-28113

Fantec MWiD25-DS CVE-2022-28113 分析报告 作者：@code-byter ========================== 这是一篇关于 Fantec MWiD25-DS 旅行路由器（固件版本：2.000.030）漏洞利用的分析报告。该漏洞允许任何未经授权的用户以 root 身份执行任意命令。备份功能（upload.csp）中的漏洞允许任何用户写入文件，从而无需有效会话 Cookie 即可重置用户密码。利用这些新凭据，攻击者可以登录 Web 界面并利用缓冲区溢出漏洞。设置 WiFi 客户端功能的 SSID...

CVE-2020-29669

Macally WIFISD2-2A82 Informe sobre CVE-2020-29669 por Maximilian Barz Silky y Daniel Schwendner code-byter ========================== Este es un informe sobre la explotación del router de viaje Macally WIFISD2-2A82 versión de firmware: 2.000.010. El usuario Guest puede restablecer su propia...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

PoC per tripla RCE su GL.iNet Beryl AX PoC per tre vulnerabilità di command injection non autenticate CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 nel firmware = 4.4.5 del router da viaggio GL.iNet GL-MT3000 Beryl AX. Analisi completa:...

CVE-2013-6918

The web interface on the Satechi travel router 1.5, when Wi-Fi is used for WAN access, exposes the console without authentication on the WAN IP address regardless of the "Web Management via WAN" setting, which allows remote attackers to bypass intended access restrictions via HTTP requests...

EUVD-2013-6720

Malware in sbrugna...

Planex MZK-DP300N 跨站脚本漏洞

The Planex MZK-DP300N is a hotel router travel router from Planex Japan. A cross-site scripting vulnerability exists in Planex MZK-DP300N version 1.05 and earlier. An attacker can exploit this vulnerability to execute arbitrary script on a web browser...

Gigastone TR1 Travel Router R101 安全漏洞

The Gigastone TR1 Travel Router R101 is a wireless router from Gigastone. A security vulnerability exists in the Gigastone TR1 Travel Router R101 v1.0.2. An authenticated attacker can exploit this vulnerability to execute arbitrary commands on the device by sending a crafted HTTP request to the...

PT-2024-31207 · Gigastone · Gigastone Tr1 Travel Router R101

Name of the Vulnerable Software and Affected Versions: Gigastone TR1 Travel Router R101 version 1.0.2 Description: The issue allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the ssid parameter in the request. This enables the attack...

CVE-2024-44678

Gigastone TR1 Travel Router R101 v1.0.2 is vulnerable to Command Injection. This allows an authenticated attacker to execute arbitrary commands on the device by sending a crafted HTTP request to the ssid parameter in the request...

CVE-2020-29669

In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...

HooToo HT-05 Remote Code Execution

A remote code execution vulnerability exists in HooToo HT-05 travel router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

CVE-2013-6918

The web interface on the Satechi travel router 1.5, when Wi-Fi is used for WAN access, exposes the console without authentication on the WAN IP address regardless of the "Web Management via WAN" setting, which allows remote attackers to bypass intended access restrictions via HTTP requests...

Authentication flaw

The web interface on the Satechi travel router 1.5, when Wi-Fi is used for WAN access, exposes the console without authentication on the WAN IP address regardless of the "Web Management via WAN" setting, which allows remote attackers to bypass intended access restrictions via HTTP requests...

CVE-2013-6918

The web interface on the Satechi travel router 1.5, when Wi-Fi is used for WAN access, exposes the console without authentication on the WAN IP address regardless of the "Web Management via WAN" setting, which allows remote attackers to bypass intended access restrictions via HTTP requests...

CVE-2013-6918

CVE-2013-6918 affects the Satechi travel router 1.5: when Wi‑Fi is used for WAN access, the web interface exposes the console on the WAN IP without authentication, bypassing access restrictions via HTTP requests. Multiple sources (NVD/Red Hat/CVE listings) confirm this authenticated bypass, with ...

Satechi Travel Router unauthorized access

Unauthorized access via WAN interface...

Unauthorized console access on Satechi travel router v1.5

Satechi makes a travel router that broadcasts a protected wifi network that can be configured connect to either a wired or wireless network on it’s public wan interface. It runs a customized dd-wrt build from version 2.4 The router is configurable via a web interface available within its protecte...