88 matches found
CVE-2026-19348
The CVE-2026-19348 entry concerns Shenzhen Aitemi M300 Wi‑Fi Repeater. A vulnerability in the sprintf handling within /protocol.csp?fname=net&opt=smacfilter_conf&function=set&act=add&name=test&enable=1 allows remote command injection by manipulating parameters such as enable/name/mac. Impact is h...
Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure
Acexy Wireless-N WiFi Repeater REV 1.0 is vulnerable to password disclosure because the password.html page of the web management interface contains the administrator account password in plaintext. id: CVE-2021-28937 info: name: Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure...
CVE-2026-58457
Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...
EUVD-2026-41128
Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...
Tenda A18 安全漏洞
The Tenda A18 is a AC1200 dual-band Wi-Fi repeater produced by the Chinese company Tenda. Version 15.13.07.13 of the Tenda A18 contains a security vulnerability. This vulnerability stems from the parsemacfilterrule function in the /goform/setBlackRule file, where an stack buffer overflow occurs d...
Shenzhen Aitemi M300 Wi-Fi Repeater – Unauthenticated Remote Command Execution via `time` Parameter
An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...
CVE-2021-28936
The Acexy Wireless-N WiFi Repeater REV 1.0 28.08.06.1 Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known default:admin whereas no previous authentication is required...
EUVD-2017-17716
Malware in sbrugna...
EUVD-2021-14858
Malware in sbrugna...
EUVD-2017-5230
Malware in sbrugna...
EUVD-2017-17715
Malware in sbrugna...
EUVD-2021-15587
Malware in sbrugna...
EUVD-2018-20826
Malware in sbrugna...
EUVD-2022-37525
Malicious code in bioql PyPI...
EUVD-2022-37527
Malicious code in bioql PyPI...
EUVD-2022-37526
Malicious code in bioql PyPI...
EUVD-2022-37524
Malicious code in bioql PyPI...
EUVD-2022-37523
Malicious code in bioql PyPI...
📄 Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated Remote Code Execution
This Metasploit module exploits an unauthenticated remote command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. The vulnerability lies in the time parameter of the time configuration endpoint, which is passed unsanitized to a shell command executed via th...
Itemir M300 Wi-Fi Repeater 安全漏洞
The Itemir M300 Wi-Fi Repeater is a wireless repeater from China-based Itemir. A security vulnerability exists in the Itemir M300 Wi-Fi Repeater that stems from an uncleaned key parameter that could lead to an unauthenticated remote command injection attack...