CVE-2026-121932

A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi. Performing a manipulation of the argument pingip/tracerouteip results in os command injection. The attack may be initiated remotely. The exploit is now public and may be used...

CVE-2026-121931

A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument tracerouteip leads to os command injection. The attack can be launched...

CVE-2026-121930

A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of the component Ping Diagnostic. This manipulation of the argument pingip causes os command injection. The attack can be initiated remotely. The exploit has been made...

EUVD-2026-117050

A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi. Performing a manipulation of the argument pingip/tracerouteip results in os command injection. The attack may be initiated remotely. The exploit is now public and may be used...

CVE-2026-121932

The Linksys E5350 (version 1.0.00.037 ) is vulnerable to OS command injection due to improper neutralization of special elements in the /wizard/apply.cgi file. Attackers can initiate the attack remotely by manipulating the ping_ip or traceroute_ip arguments. The documents confirm that an exploit ...

CVE-2026-121931

A security vulnerability exists in the Linksys WRT54GL (version 4.30.18) within the Traceroute Diagnostic Function . Specifically, the apply.cgi file fails to properly neutralize the traceroute_ip argument, leading to OS command injection . This vulnerability can be exploited remotely and affects...

EUVD-2026-117047

A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument tracerouteip leads to os command injection. The attack can be launched...

CVE-2026-121930

A command injection vulnerability exists in the Linksys WRT54GL (version 4.30.18) within the Ping Diagnostic component. The flaw is located in the system function of the apply.cgi file, where improper handling of the ping_ip argument allows for remote OS command injection. While a public exploit ...

EUVD-2026-117019

A weakness has been identified in Linksys WRT54GL 4.30.18. The affected element is the function system of the file apply.cgi of the component Ping Diagnostic. This manipulation of the argument pingip causes os command injection. The attack can be initiated remotely. The exploit has been made...

CVE-2026-121931: Linksys WRT54GL: A security vulnerability has been detected in Linksys WRT54GL 4.30.18

A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument tracerouteip leads to os command injection. The attack can be launched...

PT-2026-137096

Name of the Vulnerable Software and Affected Versions Linksys WRT54GL version 4.30.18 Description An OS command injection flaw exists in the Ping Diagnostic component. A remote network attacker with administrator credentials can execute arbitrary operating system commands by manipulating the ping...

PT-2026-137104

Name of the Vulnerable Software and Affected Versions Linksys E5350 version 1.0.00.037 Description An authentication bypass exists in the Setup Wizard component. A remote attacker can manipulate the wizard router pwd argument within the save settings function of the '/wizard/apply.cgi' endpoint t...

PT-2026-137098

Name of the Vulnerable Software and Affected Versions Linksys E5350 version 1.0.00.037 Description An OS command injection flaw exists in the /wizard/apply.cgi endpoint. This issue occurs within the system function when the ping ip or traceroute ip variables are manipulated, allowing a remote...

Linksys wrt54gl command injection vulnerability

The Linksys WRT54GL running version 4.30.18 contains a command injection vulnerability. This flaw arises from improper handling of the parameter “tracerouteip” by the system function within the apply.cgi file of the Traceroute Diagnostic Function component. It may lead to remote execution of OS...

PT-2026-137097

A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument traceroute ip leads to os command injection. The attack can be launched...

CVE-2024-12856

CVE-2024-12856 This is an exploit for Four-Faith router models F3x24 and F3x36 to get a reverse shell. "The Four-Faith router models F3x24 and F3x36 are affected by an operating system OS command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to...

D-Link DAP-1620 LFI (CVE-2021-46381)

Exploits CVE-2021-46381 in D-Link DAP-1620: path traversal via htmlresponsepage in POST /apply.cgi reads /etc/passwd and /etc/shadow without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DAP-1620 apply.cgi traversal LFI CVE-2021-46381.""" import re from kittysploit import fr...

Asus B1M Projector RCE

Module exploits Asus B1M Projector Remote Code Execution vulnerability which allows executing command on operating system level with root privileges. !/usr/bin/env python3 -- coding: utf-8 -- """Asus B1M Projector RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient...

CVE-2026-7675

A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function startlan of the file /apply.cgi. The manipulation of the argument Channel/ApCliSsid leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been...

EUVD-2026-26809

A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8. Impacted is the function startlan of the file /apply.cgi. The manipulation of the argument Channel/ApCliSsid leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been...