14155 matches found
PT-2025-53208
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the rt2x00 Wi-Fi driver when handling channel surveys. Specifically, when an rt2x00 device is removed, the associated channel surveys are not freed, leading to a...
CVE-2025-14300
The HTTPS service on Tapo C200 V3 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service DoS...
TP-Link Tapo C200 安全漏洞
TP-Link Tapo C200 is a smart WiFi camera from China P&L TP-Link. A security vulnerability exists in TP-Link Tapo C200 V3, which stems from a lack of authentication on the connectAP interface, which could lead to Wi-Fi configuration modification and denial of service attacks...
CVE-2025-14878
A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit...
CVE-2025-14738
CVE-2025-14738 describes an improper authentication vulnerability in TP-Link WA850RE (httpd modules) that allows unauthenticated attackers to download the device configuration file. Affected are WA850RE V2_160527 and WA850RE V3_160922. The issue is triggered via the httpd module and does not requ...
CVE-2025-14878
A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit...
CVE-2025-14878
CVE-2025-14878 affects Tenda WH450 (v1.0.0.18). The vulnerability lies in the HTTP Request Handler, specifically in the /goform/wirelessRestart function, where manipulation of the GO argument causes a stack-based buffer overflow. Remote exploitation is possible, and a public PoC/exploit exists. A...
CVE-2025-14878 Tenda WH450 HTTP Request wirelessRestart stack-based overflow
A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit...
CVE-2025-68459
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...
Tenda WH450 安全漏洞
Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from improper handling of the parameter GO in the file /goform/wirelessRestart, which could result in a stack buffer overflow...
WODESYS WD-R608U 安全漏洞
The WODESYS WD-R608U is a wireless router from China Xinyang WODESYS. A security vulnerability exists in the WODESYS WD-R608U that originates from a configuration file storing the administrator password in clear text, which could allow an unauthorized user to obtain the password...
WODESYS WD-R608U 安全漏洞
WODESYS WD-R608U is a wireless router from China Xinyang WODESYS. A security vulnerability exists in the WODESYS WD-R608U that originates from an unauthorized user being able to directly view configuration files...
PT-2025-51995
Name of the Vulnerable Software and Affected Versions Ruijie Networks AP180 series versions affected versions not specified Description The RG-AP180, an indoor wall plate wireless AP, contains an OS command injection issue. An attacker who gains access to the CLI service can execute arbitrary OS...
CVE-2025-65855
The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...
kernel: wifi: cfg80211: fix use-after-free in cmp_bss()
A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...
CVE-2025-65855
The OTA firmware update mechanism in Netun Solutions HelpFlash IoT firmware v18178221102ASCIIPRO1R550 uses hard-coded WiFi credentials identical across all devices and does not authenticate update servers or validate firmware signatures. An attacker with brief physical access can activate OTA mod...
Dell Wireless 5932e and Qualcomm Snapdragon X62 Driver Package Installed
Binary data dellwireless5932efirmwareinstalled.nbin...
CVE-2025-68255 staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing The Supported Rates IE length from an incoming Association Request frame was used directly as the memcpy length when copying into a fixed-size 16-byte stack...
Mercury D196G 安全漏洞
The Mercury D196G is a wireless router from Mercury China. A security vulnerability exists in the Mercury D196G d196gv1-cn-up2020-01-0911.21.44 version, which stems from improper handling of the password parameter and could lead to a buffer overflow...
CVE-2025-14709
A security vulnerability has been detected in Shiguangwu sgwbox N3 2.0.25. Affected by this issue is some unknown functionality of the file /usr/sbin/httpeshellserver of the component WIRELESSCFGGET Interface. The manipulation of the argument params leads to buffer overflow. Remote exploitation o...