CVE-2025-50616

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN0046f984 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wladvancedset in the payload, which can cause the program to crash and lead to a Denial of Servi...

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...

Malicious code in @zalastax/nolb-_wl (npm)

The package @zalastax/nolb-wl was found to contain malicious code...

MAL-2025-10594 Malicious code in @zalastax/nolb-_wl (npm)

The package @zalastax/nolb-wl was found to contain malicious code...

CVE-2025-50615

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlmacfilterset in the payload, which can cause the program to crash and lead to a Denial of...

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlsecset in the payload, which may cause the program to crash and potentially lead to a Deni...

CVE-2025-50608

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wlbaseset in the payload, which can cause the program to crash and potentially lead to a Denial ...

PT-2025-33009 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in Netis WF2880. The vulnerability is located in the FUN 00471994 function of the cgitest.cgi file. Attackers can exploit this by controlling the wl base set variable...

PT-2025-33031 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in the FUN 00470c50 function of the cgitest.cgi file. An attacker can trigger this issue by controlling the wl mac filter set value within the payload, potentially...

PT-2025-33032 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in the FUN 0046f984 function of the cgitest.cgi file. Attackers can exploit this by controlling the wl advanced set value within the payload, potentially causing a...

PT-2025-33011 · Netis · Netis Wf2880

Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow issue exists in the FUN 00476598 function of the cgitest.cgi file. Attackers can exploit this by controlling the wl base set 5g value within the payload, potentially causing a Deni...

CVE-2025-50616

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN0046f984 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wladvancedset in the payload, which can cause the program to crash and lead to a Denial of Servi...

Weidmueller多款产品 操作系统命令注入漏洞

The Weidmueller IE-SR-2TX-WL, among others, is an industrial-grade security router from Weidmueller, Germany. An operating system command injection vulnerability exists in several Weidmueller products. The vulnerability stems from improper cleanup of user input in the main web interface, which...

Weidmueller多款产品 操作系统命令注入漏洞

The Weidmueller IE-SR-2TX-WL, among others, is an industrial-grade security router from Weidmueller, Germany. An operating system command injection vulnerability exists in several Weidmueller products. The vulnerability stems from improper cleanup of user input in the main web interface, which...

Weidmueller多款产品 安全漏洞

The Weidmueller IE-SR-2TX-WL, among others, is an industrial-grade security router from Weidmueller, Germany. A security vulnerability exists in several Weidmueller products that originates from a stack buffer overflow in the u-link management API, which could result in full access privileges. Th...

Belkin F9K1122 命令注入漏洞

The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a command injection vulnerability that originates from the incorrect operation of the parameters wanipaddr/wannetmask/wangateway/wlssid in the file /goform/formBSSetSitesurvey. An attacker can exploit this vulnerability...

Weidmueller Interface IE-SR-2TX-WL 操作系统命令注入漏洞

The Weidmueller Interface IE-SR-2TX-WL is an industrial security router from Weidmueller Interface, Germany. The Weidmueller Interface IE-SR-2TX-WL suffers from an operating system command injection vulnerability that originates from a man-in-the-middle attacker being able to inject arbitrary...

WAVLINK多款产品 安全漏洞

WAVLINK is a router from China Ruiyin WAVLINK. It is a hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in several WAVLINK products, which originates from a buffer overflow in the parameter loginpage in the file...

WAVLINK WL-WN579A3 /cgi-bin/qos.cgi Component Command Injection Vulnerability

WAVLINK WL-WN579A3 is a high performance dual-band wireless card from China RuiYin WAVLINK. The WAVLINK WL-WN579A3 suffers from a command injection vulnerability that originates from unfiltered input in the /cgi-bin/qos.cgi component, no details of the vulnerability are provided at this time...