PT-2023-5575 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software for Wireless LAN Controllers affected versions not specified Description: A vulnerability in the Wireless Network Control daemon wncd could allow an unauthenticated, adjacent attacker to cause a denial of service DoS...

PT-2023-5644 · Cisco · Cisco Wireless Lan Controller Aireos +1

Name of the Vulnerable Software and Affected Versions: Cisco Wireless LAN Controller WLC AireOS Software affected versions not specified Description: A vulnerability in the memory buffer of Cisco Wireless LAN Controller WLC AireOS Software could allow an unauthenticated, adjacent attacker to caus...

Tenda AC10 缓冲区错误漏洞

Tenda AC10U is a dual-band Gigabit wireless router from Tenda Technology, designed for 200 megabit and above fiber optic homes, supporting 802.11ac dual-band technology 2.4GHz and 5GHz, with a theoretical WiFi rate of up to 867Mbps. The Tenda AC10U suffers from a stack buffer overflow...

D-Link DIR-806 Command Execution Vulnerability

The D-Link DIR-806 is a wireless router from China's AUO D-Link. The D-Link DIR-806 suffers from a command execution vulnerability that stems from the REMOTEPORT parameter failing to correctly filter constructed command special characters, commands, etc. An attacker can exploit this vulnerability...

Fedora 37 : linux-firmware (2023-defb0a89ff)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-defb0a89ff advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software allows a hacker to execute arbitrary code.

The vulnerability of the SetHostIPv6Settings function in the D-Link DAP-1325 wireless signal booster software relates to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2023-28652 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue arises when a Wi-Fi password may not be deleted when activating a Mac in macOS Recovery. This was addressed through improved state management. Recommendations: For versions prior to 14, update...

The vulnerability of the SetAPLanSettings() function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a hacker to execute arbitrary code.

The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster relates to the lack of measures to neutralize specific elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Fedora 38 : linux-firmware (2023-4056a5c165)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4056a5c165 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

CVE-2023-43129

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTEPORT parameters...

Command injection

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection...

CVE-2023-43130

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection...

CVE-2023-43129

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTEPORT parameters...

CVE-2023-43130

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection...

D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which originates from a parameter sipaddress found to contain a stack overflow via ipportFilter...

D-Link DIR-823G Buffer Error Vulnerability

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B05, which stems from a parameter TXPower and GuardInt found to contain a stack overflow via SetWLanRadioSecurity...

CVE-2023-43128

D-LINK DIR-806 1200M11AC wireless router DIR806A1FW100CNb11 is vulnerable to command injection due to lax filtering of HTTPST parameters...

TOTOLINK Wireless Routers Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/stopwatch' class MetasploitModule 'TOTOLINK Wireless Routers unauthenticated remote command execution vulnerability.', 'Description' = %q Multiple TOTOLINK...

TOTOLINK Wireless Routers Remote Command Execution Exploit

Multiple TOTOLINK network products contain a command injection vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the command parameter. After exploitation, an attacker will have full access with the same user privileges under...

PT-2024-14766

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible out-of-bound write in the ath12k wmi ext hal reg caps function. The reg cap.phy id is extracted from a WMI event and could be an unexpected value in ca...