Tenda RX3 Command Injection Vulnerability

Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a command injection vulnerability that stems from the failure of the file /goform/telnet to properly filter construct...

D-Link DIR-600L formWlSiteSurvey function buffer overflow vulnerability

The D-Link DIR-600L is an entry-level wireless router from China's AUO D-Link that supports 150Mbps wireless transmission and four 100 megabit wired ports. The D-Link DIR-600L suffers from a buffer overflow vulnerability that stems from the formWlSiteSurvey function parameter host failing to...

D-Link DIR-600L wake_on_lan Function Command Injection Vulnerability

The D-Link DIR-600L is a wireless router from China's AUO D-Link. The D-Link DIR-600L suffers from a command injection vulnerability that stems from the wakeonlan function parameter host failing to correctly filter constructed command special characters, commands, etc. The vulnerability can be...

Tenda RX2 Pro setLanCfg API Endpoint Input Validation Error Vulnerability

Tenda RX2 Pro is a high performance WiFi 6 signal amplifier from Tenda China. The Tenda RX2 Pro suffers from an input validation error vulnerability that stems from a lack of input validation in the setLanCfg API endpoint, which can be exploited by an attacker to gain root shell access...

TOTOLINK A720R Access Control Error Vulnerability

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. TOTOLINK A720R suffers from an access control error vulnerability that stems from improper access control of the parameter topicurl in the Log Handler component file /cgi-bin/cstecgi.cgi, no details of the vulnerability a...

PCMan FTP Server SEND Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability, which originates from the SEND command handler failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a deni...

Oracle OpenGrok Cross-Site Scripting Vulnerability

Oracle OpenGrok is the United States Oracle Oracle company a fast and efficient source code search and cross-reference tool that supports a variety of programming languages for navigation and analysis of large code libraries. Oracle OpenGrok suffers from a cross-site scripting vulnerability that...

PCMan FTP Server PROMPT Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the PROMPT command handler failing to properly validate the length of input data, which can be exploited by an attacker to cause a denial of service...

Dell Storage Manager Cross-Site Scripting Vulnerability

Dell Storage Manager is a centralized storage management platform from Dell that supports the configuration, monitoring and automated operation and maintenance of the full range of Dell EMC storage systems. A cross-site scripting vulnerability exists in Dell Storage Manager that originates from...

NETGEAR RAX5 vif_disable function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the iface parameter in the vifdisable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...

TOTOLINK CPE CP900 CloudSrvUserdataVersionCheck Function Command Injection Vulnerability

TOTOLINK CPE CP900 is an outdoor wireless CPE device from China Gion Electronics TOTOLINK. The TOTOLINK CPE CP900 suffers from a command injection vulnerability that stems from the CloudSrvUserdataVersionCheck function failing to correctly filter construct command special characters, commands, et...

Unspecified Vulnerability in RT-Labs P-Net (CNVD-2025-10052)

RT-Labs P-Net is an open source PROFINET protocol stack from RT-Labs that enables standard communication between industrial devices and PROFINET controllers. A security vulnerability exists in RT-Labs P-Net version 1.0.1 and prior versions, which can be exploited by attackers to cause memory...

Unspecified Vulnerability in PyTorch (CNVD-2025-23289)

PyTorch is a Python package open-sourced by PyTorch. PyTorch has a security vulnerability that originates from improper handling of the function torch.cuda.nccl.reduce in the file torch/cuda/nccl.py, which can be exploited by an attacker to cause a denial of service...

D-Link DIR-600L formEasySetupWizard3 Function Buffer Overflow Vulnerability

The D-Link DIR-600L is an entry-level wireless router from China's AUO D-Link that supports 150Mbps wireless transmission and four 100 megabit wired ports. The D-Link DIR-600L suffers from a buffer overflow vulnerability that stems from the parameter host of function formEasySetupWizard3 failing ...

NETGEAR RAX5 vif_enable function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that originates from the iface parameter in the vifenable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...

Microsoft Azure Functions Data Forgery Issue Vulnerability

Microsoft Azure Functions is a hosted Platform-as-a-Service PaaS provider from Microsoft Corporation USA that provides event-driven and scheduled compute resources for Azure cloud services. Microsoft Azure Functions has a data forgery issue vulnerability that stems from improper cryptographic...

WAVLINK WL-WN530H4 Command Injection Vulnerability

WAVLINK WL-WN530H4 is a high-performance USB wireless card from China RuiYin WAVLINK that supports 802.11ac dual-band Wi-Fi. WAVLINK WL-WN530H4 suffers from a command injection vulnerability, which originates from the failure of the pingtest function in adm.cgi to correctly filter pingIp paramete...

Tenda W20E formSetDebugCfg function module parameter command injection vulnerability

The Tenda W20E is a router from the Chinese company Tenda. The Tenda W20E suffers from a command injection vulnerability that stems from the failure of the formSetDebugCfg function module parameter to properly filter constructor command special characters, commands, etc. The vulnerability is caus...

Cisco Catalyst SD-WAN Manager Trust Management Issue Vulnerability

Cisco Catalyst SD-WAN Manager Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. It simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. A trust management issue vulnerability exists in Cisco Catalyst SD-WAN Manager, which stems...

NETGEAR RAX5 reset_wifi function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability, which stems from the devname parameter in the resetwifi function failing to correctly filter constructed command special characters, commands, etc. The vulnerability can be exploited t...

Unspecified Vulnerability in RT-Labs P-Net (CNVD-2025-10053)

RT-Labs P-Net is an open source PROFINET protocol stack from RT-Labs that enables standard communication between industrial devices and PROFINET controllers. A security vulnerability exists in RT-Labs P-Net version 1.0.1 and prior versions, which can be exploited by an attacker to cause an IO...

NETGEAR RAX5 apcli_cancel_wps function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the failure of the ifname parameter in the apclicancelwps function to correctly filter constructed command special characters, commands, and so on. An attacker can explo...

TOTOLINK CA300-PoE CloudSrvUserdataVersionCheck Function Command Injection Vulnerability

TOTOLINK CA300-PoE is a wireless access point from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK CA300-PoE version V6.2c.884B20180522, which stems from the CloudSrvUserdataVersionCheck function url parameter failing to correctly filter constructed command...

TOTOLINK CA600-PoE CloudSrvUserdataVersionCheck function url parameter command injection vulnerability

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the CloudSrvUserdataVersionCheck function url parameter failing to correctly filter constructed command special character...

NETGEAR JWNR2000v2 sub_41A914 function buffer overflow vulnerability

The NETGEAR JWNR2000v2 is a wireless router from NETGEAR. The NETGEAR JWNR2000v2 suffers from a buffer overflow vulnerability that stems from the sub41A914 function parameter host failing to correctly validate the length size of the input data, no detailed vulnerability details are provided at th...

TOTOLINK A720R Access Control Error Vulnerability

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an Access Control Error vulnerability that originates from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, which can be exploited by an attacker to cause...

TOTOLINK CA600-PoE CloudSrvUserdataVersionCheck function magicid parameter command injection vulnerability

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the failure of the magicid parameter of the CloudSrvUserdataVersionCheck function to correctly filter constructed command...

Student Record System add-course.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter course-short in the file /add-course.php. An attacker can exploit this vulnerability to...

NETGEAR EX6200 sub_3C03C Function Buffer Overflow Vulnerability

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. The NETGEAR EX6200 suffers from a buffer overflow vulnerability, which originates from the sub3C03C function parameter host failing to correctly validate the length of the input data, which can be exploited by an attacker to execu...

Tenda RX2 Pro Access Control Error Vulnerability

Tenda RX2 Pro is a high performance WiFi 6 signal amplifier from Tenda China. The Tenda RX2 Pro suffers from an access control error vulnerability that can be exploited by an attacker to enable ate management binary...

Tenda RX2 Pro Information Disclosure Vulnerability

Tenda RX2 Pro is a high performance WiFi 6 signal amplifier from Tenda China. The Tenda RX2 Pro suffers from an information disclosure vulnerability that originates from the explicit transmission of sensitive information in the web management portal, which can be exploited by an attacker to decry...

PCMan FTP Server LS Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the LS command handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of...

PCMan FTP Server 'ASCII' Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server 'ASCII exists' buffer overflow vulnerability, the vulnerability stems from the ASCII command handler fails to properly validate the length size of the input data, an attacker can use this vulnerability to execute...

TOTOLINK CA300-PoE Command Injection Vulnerability (CNVD-2025-10607)

TOTOLINK CA300-PoE is a wireless access point from China's Gion Electronics TOTOLINK. TOTOLINK CA300-PoE has a command injection vulnerability, the vulnerability stems from the recvUpgradeNewFw function fwUrl parameter fails to correctly filter the construction of the command special characters,...

NETGEAR EX6200 sub_3D0BC Function Buffer Overflow Vulnerability

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. The NETGEAR EX6200 suffers from a buffer overflow vulnerability that originates from the sub3D0BC function parameter host failing to properly validate the length of the input data, which can be exploited by an attacker to execute...

NETGEAR EX6200 sub_47F7C Function Buffer Overflow Vulnerability

NETGEAR EX6200 is a wireless network signal extender from NETGEAR. The NETGEAR EX6200 suffers from a buffer overflow vulnerability that originates from the sub47F7C function parameter host failing to properly validate the length of input data, which can be exploited by an attacker to execute...

TOTOLINK CPE CP900 setUploadUserData Function Command Injection Vulnerability

TOTOLINK CPE CP900 is an outdoor wireless CPE device from China Gion Electronics TOTOLINK. The TOTOLINK CPE CP900 suffers from a command injection vulnerability that stems from the setUploadUserData function failing to properly filter construct command special characters, commands, etc. No detail...

TOTOLINK CA600-PoE setWebWlanIdx Function Command Injection Vulnerability

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the setWebWlanIdx function failing to properly filter construct command special characters, commands, etc. No detailed...

TOTOLINK CA600-PoE setUpgradeFW Function Command Injection Vulnerability

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the setUpgradeFW function failing to properly filter construct command special characters, commands, etc. No detailed...

Microsoft Edge (Chromium-based) Spoofing Vulnerability (CNVD-2025-13268)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks when visiting specially crafted websites...

IBM Cloud Pak for Business Automation Denial of Service Vulnerability

IBM Cloud Pak for Business Automation is a modular set of integrated software components from International Business Machines IBM, built for any hybrid cloud, designed to automate work and accelerate business growth. A denial of service vulnerability exists in IBM Cloud Pak for Business Automatio...

PCMan FTP Server TYPE Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the TYPE command handler failing to properly validate the length of input data, which can be exploited by an attacker to cause a denial of service...

PCMan FTP Server MDIR Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the MDIR command handler failing to properly validate the length of input data, which can be exploited by an attacker to cause a denial of service...

PCMan FTP Server LIST Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the LIST command handler failing to correctly validate the length and size of input data, which can be exploited by an attacker to cause a denial of...

ERPNext Cross-Site Request Forgery Vulnerability

ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a cross-site request forgery vulnerability that can be exploited by attackers to cause unauthorized operations...

Art Gallery Management System /admin/add-art-medium.php File SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter artmed in the file /admin/add-art-medium.php. An attacker c...

D-Link DIR-600L formEasySetupWizard function buffer overflow vulnerability

The D-Link DIR-600L is a wireless router from China-based AUO D-Link. The D-Link DIR-600L suffers from a buffer overflow vulnerability that originates from the parameter host of the function formEasySetupWizard that fails to correctly validate the length and size of the input data, which can be...

D-Link DIR-600L formSetWanL2TP function buffer overflow vulnerability

The D-Link DIR-600L is an entry-level wireless router from China's AUO D-Link that supports 150Mbps wireless transmission and four 100 megabit wired ports. The D-Link DIR-600L suffers from a buffer overflow vulnerability that stems from the formSetWanL2TP function parameter host failing to proper...

D-Link DIR-600L formSysCmd Function Command Injection Vulnerability

The D-Link DIR-600L is an entry-level wireless router from China-based AUO D-Link that supports 150Mbps wireless transmission and four 100Gbps wired ports. The D-Link DIR-600L suffers from a command injection vulnerability that stems from the formSysCmd function parameter host failing to properly...

Cyber Cafe Management System adminprofile.php File SQL Injection Vulnerability

Cyber Cafe Management System is an internet cafe management system. Cyber Cafe Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter mobilenumber in the file /adminprofile.php. An attacker can...