38 matches found
EUVD-2025-4381
Malicious code in bioql PyPI...
EUVD-2025-24584
Malicious code in bioql PyPI...
CVE-2025-50635
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...
CVE-2025-50635
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...
CVE-2025-50635
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...
Netis WF2780 安全漏洞
Netis WF2780 is a networking device from Netis Inc. Provides AC routers to deliver next-generation Wi-Fi at gigabit speeds. A security vulnerability exists in the Netis WF2780 version v2.2.35445, which stems from the FUN0048a728 function in the cgitest.cgi file not handling the CONTENTLENGTH...
CVE-2025-50635
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...
CVE-2025-50635
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...
CVE-2025-50635
Netis WF2780 vulnerability CVE-2025-50635: a null pointer dereference in the FUN_0048a728 function of cgitest.cgi when CONTENT_LENGTH is manipulated. Affects Netis WF2780 v2.2.35445. Exploitation could crash the process and cause denial of service (DoS). Public details show the issue in the cgite...
CVE-2024-25851
Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...
CVE-2024-25850
Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wpsapssid5g parameter...
CVE-2021-26747
Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution...
CVE-2025-1617
A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...
CVE-2025-1617
A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...
CVE-2025-1617
This CVE concerns Netis WF2780 devices (2.1.41925) with a cross-site scripting flaw in the Wireless 2.4G Menu SSID parameter. The vulnerability arises from improper handling of the SSID argument, enabling remote initiation of an attack. Exploitation details are limited in the provided documents, ...
CVE-2025-1617 Netis WF2780 Wireless 2.4G Menu cross site scripting
A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...
CVE-2025-1617 Netis WF2780 Wireless 2.4G Menu cross site scripting
A vulnerability, which was classified as problematic, was found in Netis WF2780 2.1.41925. This affects an unknown part of the component Wireless 2.4G Menu. The manipulation of the argument SSID leads to cross site scripting. It is possible to initiate the attack remotely. The vendor was contacte...
Netis WF2780 代码注入漏洞
Netis WF2780 is a networking device from Netis Inc. Provides AC routers to deliver next-generation Wi-Fi at gigabit speeds. A code injection vulnerability exists in the Netis WF2780 version 2.1.41925, which stems from a cross-site scripting issue contained in the SSID parameter of the Wireless 2....
PT-2025-7680 · Netis · Netis Wf2780
Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.1.41925 Description: The issue concerns a cross-site scripting XSS problem in the 2.4G Menu SSID of the Netis WF2780 wireless device. Recommendations: For version 2.1.41925, update the firmware to a version that address...
CVE-2024-25851
Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the configsequence parameter in otherpara of cgitest.cgi...