203 matches found
CVE-2021-43469
CVE-2021-43469 Exploit Title: VINGA router has weak passwords and background command execution vulnerabilities. product: VINGA WR-N300U webserver: goahead Author: CXAQHQ TIME: 2021-11-01 Command execution vulnerabilities exist on the Ping and traceroute interfaces after login. Run the IP addr...
CVE-2023-26866
CVE-2023-26866 Description GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote command injection. Commands are executed using pre-login execution and executed with root privileges allowing complete...
CVE-2024-55980
CVE-2024-55980 Wr Age Verification = 2.0.0 - Unauthenticated SQL Injection Description The Wr Age Verification plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...
TP-Link Router LFI (CVE-2015-3035)
Exploits CVE-2015-3035 in TP-Link Archer/TL-WR routers: path traversal via /login/../../../ reads arbitrary local files including password stores. !/usr/bin/env python3 -- coding: utf-8 -- """TP-Link Archer local file inclusion CVE-2015-3035.""" import re from kittysploit import from...
Linux Distros Unpatched Vulnerability : CVE-2026-72465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The outnorqst exit in...
CVE-2026-72465
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The outnorqst exit in rpcrdmareplyhandler branches away before the credit clamp, so a reply that matches no pending request reaches outpost carrying the raw credit value...
Malicious code in wr-test (PyPI)
Source: kam193 3e752a2e84135761f1cf5319ed23d3a78b994ea011df850c87938442ad249180 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but al...
MINI-QC6H-CRXX-75WR
Bulletin has no description...
MINI-W46X-6PV2-5WR8
Bulletin has no description...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: PTEs are reset when using close, especially for entries protected by wr. The userfaultfd unregistration process includes a step to remove the wr-protect bits from all relevant pgtable entries. However, this only...
VulnCheck KEV: CVE-2023-24796
Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...
EUVD-2008-2351
Malware in sbrugna...
EUVD-2021-31453
Malicious code in bioql PyPI...
EUVD-2021-31444
Malicious code in bioql PyPI...
EUVD-2021-31449
Malicious code in bioql PyPI...
EUVD-2021-31450
Malicious code in bioql PyPI...
EUVD-2021-31452
Malicious code in bioql PyPI...
EUVD-2025-14739
Malicious code in bioql PyPI...