CVE-2025-34148

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject...

PT-2025-32452 · Datacom · Datacom Dm955 5Gt 1200

Name of the Vulnerable Software and Affected Versions: Datacom DM955 5GT 1200 version 825.8010.00 Description: A cross site scripting issue exists due to the manipulation of the SSID argument within the Wireless Basic Settings component. The attack can be launched remotely. The exploit has been...

CVE-2025-8765: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Datacom DM955 5GT 1200 825.8010.00. Affected by this vulnerability is an unknown functionality of the component Wireless Basic Settings. The manipulation of the argument SSID leads to cross site scripting. The attack can be launched remotely...

Linux Distros Unpatched Vulnerability : CVE-2022-42722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2020-26142

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abus...

Linux Distros Unpatched Vulnerability : CVE-2020-26147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in...

Huawei EnzoH 安全漏洞

Huawei EnzoH is a wireless access device from Huawei China. Huawei EnzoH suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause arbitrary command execution...

Linux Distros Unpatched Vulnerability : CVE-2022-28667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write for some IntelR PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of servic...

Huawei EnzoH 安全漏洞

Huawei EnzoH is a wireless access device from Huawei China. Huawei EnzoH suffers from an operating system command injection vulnerability that can be exploited by an attacker to cause arbitrary command execution...

Linux Distros Unpatched Vulnerability : CVE-2019-17133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel through 5.3.2, cfg80211mgdwextgiwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow. CVE-2019-171...

The vulnerability of the /vb.htm component in the wireless IP camera software of D-Link DCS-6010L allows a attacker to execute XSS attacks.

The vulnerability of the /vb.htm component in the microprogramming software of the D-Link DCS-6010L wireless IP camera is related to the lack of measures taken to protect the website structure when processing the paratest parameter. Exploiting this vulnerability allows a malicious actor to carry...

Belkin F9K1009和Belkin F9K1010 安全漏洞

The Belkin F9K1009 and Belkin F9K1010 are both a wireless router from Belkin Canada. The Belkin F9K1009 and Belkin F9K1010 have a hard-coded credential vulnerability that can be exploited by an attacker to gain access to the devices...

Linux Distros Unpatched Vulnerability : CVE-2021-47436

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 usb: musb: musbdsps: requestir...

Linux Distros Unpatched Vulnerability : CVE-2024-26683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation th...

net: wwan: t7xx: Fix napi rx poll issue

...

wifi: ath12k: fix node corruption in ar->arvifs list

...

wifi: ath9k_htc: Abort software beacon handling if disabled

...

Itemir M300 Wi-Fi Repeater 安全漏洞

The Itemir M300 Wi-Fi Repeater is a wireless repeater from China-based Itemir. A security vulnerability exists in the Itemir M300 Wi-Fi Repeater that stems from an uncleared passwd parameter, which could lead to an unauthenticated remote command injection attack...

CVE-2025-34149: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploitation requires no authentication and c...

Itemir M300 Wi-Fi Repeater 安全漏洞

The Itemir M300 Wi-Fi Repeater is a wireless repeater from Itemir China. A security vulnerability exists in the Itemir M300 Wi-Fi Repeater that stems from the time parameter not being cleaned, which could lead to an unauthenticated remote command injection attack...