Lucene search
+L

5659 matches found

Positive Technologies
Positive Technologies
added 2025/08/07 12:00 a.m.22 views

PT-2025-32273

Name of the Vulnerable Software and Affected Versions Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 affected versions not specified Description An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater. When configuring the device in WISP...

9.4CVSS7.7AI score0.01286EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/08/07 12:00 a.m.14 views

PT-2025-32275 · Aitemi · Aitemi M300 Wi-Fi Repeater

Name of the Vulnerable Software and Affected Versions: Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 affected versions not specified Description: The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater is vulnerable to command injection via the user parameter. Input...

9.4CVSS7.6AI score0.01351EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/08/06 6:32 p.m.23 views

CVE-2025-34147

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

9.4CVSS7.6AI score0.01078EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/06 12:14 a.m.28 views

CVE-2025-26065

A cross-site scripting XSS vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network...

7.3CVSS5.5AI score0.00358EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/08/06 12:00 a.m.24 views

PT-2025-32131 · Realtek · Realtek Wi-Fi

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A transient Denial-of-Service DoS condition may occur when processing a frame containing a malformed shared-key descriptor. Recommendations: At the moment, there is no information about a newer...

7.5CVSS6.2AI score0.00207EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/08/06 12:00 a.m.15 views

PT-2025-32277

Name of the Vulnerable Software and Affected Versions Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 affected versions not specified Description An unauthenticated OS command injection flaw exists where the system fails to neutralize special elements used in operating system commands. A...

9.4CVSS7.8AI score0.69138EPSS
SaveExploits5References15
NVD
NVD
added 2025/08/04 6:15 p.m.22 views

CVE-2025-34147

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

9.4CVSS0.01078EPSS
SaveExploits0References3
CVE
CVE
added 2025/08/04 5:34 p.m.43 views

CVE-2025-34147

The CVE-2025-34147 entry concerns the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). Affected component: the extap2g SSID field in Extender mode configuration, where the SSID value is inserted unescaped into a reboot-time shell script. Root cause: unauthenticated OS command injection ...

9.4CVSS7.7AI score0.01078EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/04 5:34 p.m.7 views

CVE-2025-34147 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

9.4CVSS8.3AI score0.01078EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/08/04 5:34 p.m.26 views

CVE-2025-34147 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via SSID

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote...

9.4CVSS0.01078EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/04 12:00 a.m.6 views

CVE-2025-26065

A cross-site scripting XSS vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network...

5.6AI score0.00358EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/08/01 12:06 a.m.11 views

CVE-2025-50777

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera version V1.00.02 contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service...

7.8CVSS7.2AI score0.00154EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/30 7:15 p.m.21 views

CVE-2025-50777

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera version V1.00.02 contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service...

7.8CVSS0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/30 12:00 a.m.25 views

PT-2025-31430 · Aziot · Aziot 2Mp Full Hd Smart Wi-Fi Cctv Home Security Camera

Name of the Vulnerable Software and Affected Versions: AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera version V1.00.02 Description: The firmware contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Successful exploitation exposes...

7.8CVSS6.3AI score0.00154EPSS
SaveExploits0References5
Malwarebytes
Malwarebytes
added 2025/07/24 12:54 p.m.11 views

Introducing the smarter, more sophisticated Malwarebytes Trusted Advisor, your cybersecurity personal assistant

You ever get that feeling when you double-check the locks, but still wonder if you’ve missed something? That’s what a lot of people feel about cybersecurity. That’s where Malwarebytes Trusted Advisor comes in. You can see it as your very own cybersecurity personal assistant, giving you real-time...

7.6AI score
SaveExploits0
NVD
NVD
added 2025/07/21 3:15 p.m.17 views

CVE-2025-46123

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the authenticated configuration endpoint /admin/conf.jsp writes the Wi-Fi guest password to memory with snprintf using the attacker-supplied...

7.2CVSS0.01091EPSS
SaveExploits1References2
CVE
CVE
added 2025/07/21 12:00 a.m.43 views

CVE-2025-46123

CVE-2025-46123 affects CommScope Ruckus Unleashed (versions before 200.15.6.212.14 and 200.17.7.0.139) and Ruckus ZoneDirector (before 10.5.1.0.279). The issue arises from an authenticated configuration endpoint (/admin/_conf.jsp) that writes the Wi‑Fi guest password to memory using snprintf with...

7.2CVSS7.4AI score0.01091EPSS
SaveExploits1References2Affected Software2
RedhatCVE
RedhatCVE
added 2025/07/12 9:25 a.m.25 views

CVE-2025-5022

Weak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA all versions allows an attacker within the Wi-Fi communication range between the units of the product measurement unit and display unit to...

6.5CVSS7.1AI score0.0055EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/12 12:28 a.m.22 views

CVE-2025-44251

Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process...

7.5CVSS6.5AI score0.00193EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/10 3:15 p.m.11 views

CVE-2025-44251

Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process...

7.5CVSS0.00193EPSS
SaveExploits0References1
Rows per page
Query Builder