100 matches found
CVE-2023-46012
CVE-2023-46012 Vulnerabilità di esecuzione remota di codice tramite stack buffer overflow IGD UPnP in LINKSYS AC1900 EA7500v3 Questa vulnerabilità consente a un aggressore adiacente alla rete di eseguire codice arbitrario sulle installazioni interessate dei router LINKSYS EA7500. Non è richiesta...
EUVD-2026-67936
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...
EUVD-2026-67935
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...
Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability
Overview The Calix GS7 XGS GS5239XG router running firmware EXOS/6.6.47 contains a missing authentication vulnerability that exposes its UPnP Universal Plug and Play WANIPConnection service on the public WAN interface. Description Calix GS7 XGS GS5239XG is a residential gateway that provides...
CVE-2021-47854
CVE-2021-47854 affects DD-WRT 45723 and describes a buffer overflow in the UPNP network discovery service. The vulnerability is triggered by receiving crafted M-SEARCH packets with oversized UUID payloads, which can lead to remote code execution on the targeted device. The CVSS metrics indicate a...
CVE-2023-31998
A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices...
CVE-2020-10923
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UPnP service, which listens on TCP port 5000. A...
CVE-2020-10924
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...
CVE-2025-61498
CVE-2025-61498 describes a buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01, caused by a boundary error when processing untrusted input. The vulnerability can allow a remote attacker to cause Denial of Service (DoS) via a crafted packet; some sources also mention potential a...
EUVD-2018-8403
Malware in sbrugna...
EUVD-2020-18618
Malware in sbrugna...
EUVD-2021-21638
Malware in sbrugna...
EUVD-2023-36287
Malicious code in bioql PyPI...
EUVD-2025-9056
Malicious code in bioql PyPI...
EUVD-2024-54344
Malicious code in bioql PyPI...
EUVD-2023-45050
Malicious code in bioql PyPI...
EUVD-2022-50605
Malicious code in bioql PyPI...
EUVD-2025-6460
Malicious code in bioql PyPI...
TCL 65C655 Smart TV 安全漏洞
TCL 65C655 Smart TV is a Smart TV from TCL Corporation of China. A security vulnerability exists in TCL 65C655 Smart TV version V8-R75PT01-LF1V269.001116, which originates when the UPnP MediaRenderer service accepts unauthenticated SetAVTransportURI SOAP requests, which could lead to a server-sid...
PT-2025-27045
Name of the Vulnerable Software and Affected Versions: Linksys WRT1900ACS, EA7200, EA7450, and EA7500 versions up to 20250619 Description: A critical vulnerability exists in Linksys routers due to a stack-based buffer overflow. The issue is located in the SetDefaultConnectionService function with...