I-O DATA WN-7D36QR 安全漏洞

The I-O DATA WN-7D36QR is a wireless router from I-O DATA Japan. A security vulnerability exists in the I-O DATA WN-7D36QR, which stems from the presence of a hidden feature that could lead to a remote authentication attacker enabling SSH...

I-O DATA WN-7D36QR 操作系统命令注入漏洞

The I-O DATA WN-7D36QR is a wireless router from I-O DATA Japan. The I-O DATA WN-7D36QR suffers from an operating system command injection vulnerability that stems from improper neutralization of special elements, which could lead to remote command execution...

SUSE CVE-2023-53281

In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8723bs: Fix locking in rtwjointimeouthandler Commit 041879b12ddb "drivers: staging: rtl8192bs: Fix deadlock in rtwjoinbsseventprehandle" besides fixing the deadlock also modified rtwjointimeouthandler to use...

CVE-2024-12913

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Megatek Communication System Azora Wireless Network Management allows SQL Injection. This issue affects Azora Wireless Network Management: through 20250916. NOTE: The vendor did not inform about th...

CVE-2024-12913 SQLi in Megatek Communication System's Azora Wireless Network Management

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Megatek Communication System Azora Wireless Network Management allows SQL Injection. This issue affects Azora Wireless Network Management: through 20250916. NOTE: The vendor did not inform about th...

CVE-2024-12913 SQLi in Megatek Communication System's Azora Wireless Network Management

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Megatek Communication System Azora Wireless Network Management allows SQL Injection. This issue affects Azora Wireless Network Management: through 20250916. NOTE: The vendor did not inform about th...

DEBIAN-CVE-2023-53277

In the Linux kernel, the following vulnerability has been resolved: wifi: iwl3945: Add missing check for createsinglethreadworkqueue Add the check for the return value of the createsinglethreadworkqueue in order to avoid NULL pointer dereference...

UBUNTU-CVE-2023-53277

In the Linux kernel, the following vulnerability has been resolved: wifi: iwl3945: Add missing check for createsinglethreadworkqueue Add the check for the return value of the createsinglethreadworkqueue in order to avoid NULL pointer dereference...

CVE-2023-53277 wifi: iwl3945: Add missing check for create_singlethread_workqueue

In the Linux kernel, the following vulnerability has been resolved: wifi: iwl3945: Add missing check for createsinglethreadworkqueue Add the check for the return value of the createsinglethreadworkqueue in order to avoid NULL pointer dereference...

Wavlink WL-WN578W2 sub_404850 function OS Command Injection Vulnerability

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An operating system command injection vulnerability exists in Wavlink WL-WN578W2 version 221110, which originates from the parameter deletelist in the function sub404850 in the file /cgi-bin/wireless.cgi that fails to correctly...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improper locking mechanism in the rtl8723bs driver, which could lead to a soft interrupt handling excepti...

Azora Wireless Network Management SQL注入漏洞

Azora Wireless Network Management is a wireless network management platform from Azora Turkey. An SQL injection vulnerability exists in Azora Wireless Network Management 20250916 and prior versions, which stems from improper neutralization of special elements and could lead to an SQL injection...

PT-2025-37922

Name of the Vulnerable Software and Affected Versions: Megatek Communication System Azora Wireless Network Management versions through 20250916 Description: The software contains an SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for SQL...

Linux Distros Unpatched Vulnerability : CVE-2023-53180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: Avoid NULL pointer access during management transmit cleanup Currently 'ar' reference is not added in skbcb. Though this is generally not used...

CVE-2022-50297

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usbendpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. In this case there was an interrupt endpoint where the driver expected a bu...

CVE-2022-50297 wifi: ath9k: verify the expected usb_endpoints are present

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: verify the expected usbendpoints are present The bug arises when a USB device claims to be an ATH9K but doesn't have the expected endpoints. In this case there was an interrupt endpoint where the driver expected a bu...

CVE-2022-50297

CVE-2022-50297 concerns the Linux kernel driver for ath9k USB wireless devices. The issue arises when a USB device claims to be ATH9K but does not expose the endpoints the driver expects; specifically, an interrupt endpoint is presented where a bulk endpoint is anticipated. This mismatch can caus...

CVE-2023-53199 wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hifusb: clean up skbs if ath9khifusbrxstream fails Syzkaller detected a memory leak of skbs in ath9khifusbrxstream. While processing skbs in ath9khifusbrxstream, the already allocated skbs in skbpool are not freed if...

DEBIAN-CVE-2023-53153

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on reconnect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP...

UBUNTU-CVE-2023-53180

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid NULL pointer access during management transmit cleanup Currently 'ar' reference is not added in skbcb. Though this is generally not used during transmit completion callbacks, on interface removal the remaining...