-
FirmAudit2 进阶篇:3天5本CNVD,从固件到操作系统——新增 OS 镜像 / 内核审计能力
-
Tenda CP6 V11.10.00.243: /etc/passwd Hardcoded Root Weak Password (Unauthenticated, Root Access)
-
Tenda CP6 V11.10.00.243: wagent CGI Quote-Wrapping Command Injection (Unauthenticated, Root RCE)
-
Xiaomi MiWiFi R4C 2.30.19: macfilterctl setRule mac Field iptables Command Injection (MAC Whitelist Bypass Prerequisite, Root RCE)
-
Tenda CP6 V11.10.00.243: getsnapshot.cgi QUERY_STRING Command Injection (Unauthenticated, Root RCE)
-
Xiaomi MiWiFi R4C 2.30.19: macfilterctl MAC Filter Rule Lua Code Injection (Authenticated, Root RCE)
-
Alpine Linux minirootfs 3.24.0 x86: apk-tools 3.0.6 Directory Symlink Traversal Arbitrary File Overwrite (No Auth Required, Root Privilege Escalation and Persistence)
-
TP-LINK TL-FW5600E 1.11.2: usermngr.lua add_user username Parameter Command Injection (Authenticated, Root RCE)
-
Tenda TC3T14C V25.4.26.15: Kylin CNetApp::OnConfigNetwork Command Injection (Network Configuration Input, Root RCE)
-
Tenda TES7002 V4.0.0: boa formImportOMCIShell Uploaded Script Execution (Unauthenticated Reachability Likely, Root RCE)