501 matches found
The vulnerability of the qosSettings() function in the qos.cgi script of the Wavlink AC3000 (WL-WN533A8) router’s script allows a hacker to execute arbitrary code.
The vulnerability of the qosSettings function in the qos.cgi script of the Wavlink AC3000 WL-WN533A8 router software lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WAVLINK WL-WN575A3 Buffer Overflow Vulnerability
WAVLINK WL-WN575A3 is a wireless network signal extender from China RuiYin WAVLINK. The WAVLINK WL-WN575A3 suffers from a buffer overflow vulnerability that stems from a lack of length validation, and no details of the vulnerability are provided at this time...
CVE-2025-25528
Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data. By successfully exploiting the vulnerabilities, attackers can crash the remote devices or execute arbitrary commands without any...
CVE-2025-25528
Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data. By successfully exploiting the vulnerabilities, attackers can crash the remote devices or execute arbitrary commands without any...
WAVLINK WL-WN575A3 安全漏洞
WAVLINK WL-WN575A3 is a wireless network signal extender from China RuiYin WAVLINK. The WAVLINK WL-WN575A3 suffers from a buffer overflow vulnerability that stems from a lack of length validation, and no details of the vulnerability are provided at this time...
Netis Systems多款产品 安全漏洞
Netis Systems NX10 and others are a wireless dual-band gigabit router from Netis Systems. A security vulnerability exists in various Netis Systems products. An attacker can exploit the vulnerability to obtain sensitive information via the modename, wllink parameters of the skkget.cgi component. T...
VulnCheck KEV: CVE-2022-23900
A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi...
WordPress ShopLentor plugin <= 2.9.8 - Authenticated (Contributor+) Sensitive Information Exposure via WL: FAQ Widget Elementor Template vulnerability
Authenticated Contributor+ Sensitive Information Exposure via WL: FAQ Widget Elementor Template vulnerability discovered by Ankit Patel in WordPress Plugin ShopLentor versions = 2.9.8...
CVE-2024-44342
D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution RCE vulnerability via the wl0.0ssid parameter. This vulnerability is exploited via a crafted POST request...
PT-2024-24967 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the wl notify rx mgmt frame function of wl cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote...
CVE-2024-34217
TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfileClientMode function...
CVE-2024-27975
An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM...
CVE-2024-24991
A Null Pointer Dereference vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authenticated remote attacker to perform denial of service attacks...
CVE-2024-2868 ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via WL Universal Product Layout
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution formerly WooLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the slitems parameter in the WL Special Day Offer Widget in all versions up to, and including, 2.8.3 due to...
Malicious code in wlwz-2312-7500 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc78f5fa2b7674a78b7d1747aca89c37a89e54aa26053fb61fb40610a1994dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-6907 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 951416c5b0286df301b1ebb8dfbc710b30bfccab2e25b169a3addf325b5018eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-5608 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 987f5891732c1ce4f3c25901872d0b7e544ae6f63e637e6ebc620d8a1d80f3cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
WAVLINK WL-WNJ575A3 Command Injection Vulnerability
WAVLINK WL-WNJ575A3 is a wireless network signal extender from China RuiYin Technology WAVLINK. The WAVLINK WL-WNJ575A3 suffers from a command injection vulnerability that originates from an application failing to properly filter construct command special characters, commands, etc. The...
WAVLINK WL-WNJ575A3 命令注入漏洞
WAVLINK WL-WNJ575A3 is a wireless network signal extender from China RuiYin Technology WAVLINK. The WAVLINK WL-WNJ575A3 suffers from a command injection vulnerability that originates from an application failing to properly filter construct command special characters, commands, etc. The...