189 matches found
Router-Exploit-Shovel
Router Exploit Shovel توليد تلقائي للتطبيقات لاستغلال تجاوز سعة المكدس في أجهزة التوجيه اللاسلكية أداة Router Exploit Shovel هي أداة توليد تلقائي للتطبيقات لاستغلال تجاوز سعة المكدس في أجهزة التوجيه اللاسلكية. تقوم الأداة بتنفيذ الوظائف الرئيسية للاستغلال، حيث يمكنها التكيف مع طول حشو البيانات عل...
CVE-2021-46422
CVE-2021-46422 حقن أوامر نظام التشغيل في أجهزة التوجيه اللاسلكية الكورية التثبيت git clone https://github.com/kelemaoya/CVE-2021-46422.git cd CVE-2021-46422 pip3 install -r requirements.txt الاستخدام URL فردي pocsuite -r ../CVE-2021-46422.py -u url --verify URLs مجمعة pocsuite -r...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-59764
Summary: CVE-2026-59764 affects ELECOM wireless LAN routers and access points. The issue is an OS command injection in the WebUI that enables an attacker who can log in to the product to execute arbitrary OS commands. The vulnerability is supported by multiple sources (NVD entries) with confirmed...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-44387
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-44387
Summary (CVE-2026-44387): ELECOM wireless LAN routers and access points are affected by a reflected cross-site scripting vulnerability in the WebUI. Exploitation could allow an arbitrary script to run in a logged-in user’s browser. No exploitation details are provided in the connected documents b...
PT-2026-65420
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-27650
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products...
EUVD-2026-16551
Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...
CVE-2026-27650
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products...
CVE-2026-22081: Sensitive Cookie Without 'HttpOnly' Flag
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the missing HTTPOnly flag for session cookies associated with the web-based administrative interface. A remote at-tacker could exploit this vulnerability by capturing session cookies...
CVE-2026-22080: Cleartext Transmission of Sensitive Information
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the transmission of credentials encoded using reversible Base64 encoding through the web-based administrative interface. An attacker on the same network could exploit this vulnerabilit...
CVE-2026-22082: Session Fixation
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the use of login credentials as the session ID through its web-based administrative interface. A remote attacker could exploit this vulnerability by intercepting network traffic and...
CVE-2026-22079: Cleartext Transmission of Sensitive Information
This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network cou...
CVE-2019-16288
On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash...
EUVD-2017-6518
Malware in sbrugna...