← All credits
Zhou Ao
25 vulnerability records and advisories credit this contributor.
CVE-2026-92256
Netcore NR255-V 1.5.130703 IPsec PSK and RSA Key Disclosure via l2tpd_config_show.cgi Read Handlers
CVE-2026-76873
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DHCP and ARP Hostname Fields
CVE-2026-76868
Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route_policy_add.cgi via Missing exit_port
CVE-2026-76863
Netcore NR255-V 1.5.130703 Sensitive Information Disclosure via QoS Bandwidth Plan Routes
CVE-2026-76858
Netcore NR255-V 1.5.130703 Stored Cross-Site Scripting via DDNS eval() in ddns_wan_list_show.cgi
CVE-2026-76853
Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi
CVE-2026-76870
Netcore NR255-V 1.5.130703 Out-of-Bounds Read in mtd_write Firmware Upload Validation
CVE-2026-76865
Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unchecked atoi() in QoS Setter Handlers
CVE-2026-76860
Netcore NR255-V 1.5.130703 Stack-Based Buffer Overflow in wake_up_set.cgi via MAC and ID Tokenization
CVE-2026-76855
Netcore NR255-V 1.5.130703 Cross-User Session Disclosure via Audit Endpoints