70 matches found
HG532d-RCE-Exploit
Exploit RCE HG532d Resumen Un exploit de Ejecución Remota de Código RCE basado en la vulnerabilidad CVE-2017-17215. Modificado del código PoC original de exploit-db.com para funcionar en los Routers de Pasarela Doméstica Huawei HG532d. Descripción Este exploit RCE se basa en CVE-2017-17215 que...
EUVD-2026-63988
A vulnerability in the Calix EXOS firmware for the GS7 XGS GS5239XG residential router allows unauthenticated remote attackers to modify NAT port‑forwarding rules via the UPnP WANIPConnection service. The device exposes the MiniUPnPd control endpoint on the WAN interface on TCP port 5000 without...
EUVD-2026-34147
Mercusys AC12G EU V1 router with firmware AC12GEUV1200909 allows UPnP AddPortMapping to forward external ports to the router's own admin interface by accepting its own IP 192.168.1.1 or localhost 127.0.0.1 as InternalClient. An unauthenticated LAN attacker can expose the admin panel to the intern...
CVE-2026-36608
The Mercusys AC12G (EU) V1 router, running firmware AC12G(EU)_V1_200909 , is vulnerable to a flaw in the UPnP AddPortMapping function. This vulnerability exists because the service incorrectly accepts the router's own IP (192.168.1.1 ) or localhost (127.0.0.1) as a valid InternalClient . Conseque...
Exploit for Code Injection in Iptime N104S-R1_Firmware
CVE-2025-55423 — ipTIME UPnP Command Injection: Analysis & Rep...
MiniUPnP 安全漏洞
MiniUPnP is a set of UPnP tools developed by the Miniupnp project, which can be used in embedded systems. These tools enable devices in home and corporate networks to connect with each other. MiniUPnP has a security vulnerability, stemming from integer underflow in the parsing of SOAPAction...
PT-2026-28636
Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version 14 versions prior to EN 0.9.1 4.19 Build 260303 Rel.42399n V14 260303 TP-Link TL-WR841N version 14 versions prior to US 0.9.1.4.19 Build 260312 Rel. 49108n V14 0304 Description The issue resides within the UPnP...
The vulnerability of the sub_420618 function in the /goform/set_upnp file of D-link DIR-823X microprogramming routers allows a hacker to execute arbitrary commands.
The vulnerability of the sub420618 function in the /goform/setupnp function of the D-link DIR-823X microprogramming router software is related to the failure to take measures to neutralize special elements during the processing of the upnpenable parameter. Exploiting this vulnerability allows a...
Zyxel EX3510-B0 操作系统命令注入漏洞
The Zyxel EX3510-B0 is a security routing gateway developed by the Chinese company Zyxel. Versions of the Zyxel EX3510-B0 prior to 5.17ABUP.15.1C0 contain an operating system command injection vulnerability. This vulnerability stems from the UPnP feature’s susceptibility to command injections,...
CVE-2026-2175
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420618 of the file /goform/setupnp. This manipulation of the argument upnpenable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to...
CVE-2026-2175
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420618 of the file /goform/setupnp. This manipulation of the argument upnpenable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to...
CVE-2025-11676
Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 UPnP modules, which allows unauthenticated adjacent attackers to perform DoS attack. This issue affects TL-WR940N V6 = Build 220801...
EUVD-2011-4431
Malware in sbrugna...
EUVD-2011-4427
Malware in sbrugna...
EUVD-2017-12020
Malware in sbrugna...
EUVD-2006-2562
Malware in sbrugna...
EUVD-2011-4430
Malware in sbrugna...
EUVD-2011-4432
Malware in sbrugna...