12490 matches found
CVE-2024-36442: Files or Directories Accessible to External Parties
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system...
CVE-2024-36442
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system...
CVE-2024-43027
DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...
CVE-2024-43027
DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...
CVE-2024-43027: Improper Neutralization of Special Elements used in a Command
DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...
CVE-2024-43027
DrayTek Vigor 3900 , Vigor 2960 , and Vigor 300B routers (versions prior to v1.5.1.5_Beta ) are susceptible to a command injection vulnerability. The flaw exists in the action parameter of the cgi-bin/mainfunction.cgi endpoint, potentially allowing for unauthorized access or system control. Remed...
CVE-2024-43027
DrayTek Vigor 3900 before v1.5.1.5Beta, DrayTek Vigor 2960 before v1.5.1.5Beta and DrayTek Vigor 300B before v1.5.1.5Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi...
Exploit for OS Command Injection in Php
PHP CGI Argument Injection CVE-2024-4577 RCE ๐ Descripti...
Exploit for OS Command Injection in Php
PHP CGI Argument Injection CVE-2024-4577 RCE ๐ Descripti...
CVE-2024-7922: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and classified as critical. Affected by thi...
CVE-2024-7909
A vulnerability has been found in TOTOLINK EX1200L 9.3.5u.6146B20201023 and classified as critical. Affected by this vulnerability is the function setLanguageCfg of the file /www/cgi-bin/cstecgi.cgi. The manipulation of the argument langType leads to stack-based buffer overflow. The attack can be...
PT-2024-6466
Name of the Vulnerable Software and Affected Versions TOTOLINK EX1200L version 9.3.5u.6146 B20201023 Description The issue is related to a stack-based buffer overflow in the setDefResponse function of the /www/cgi-bin/cstecgi.cgi file. This can be exploited remotely by manipulating the IpAddress...
CVE-2024-7896 Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ p1_ftpserver.php command injection
A vulnerability was found in Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ 4.02/4.03/4.04. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/p1ftpserver.php. The manipulation of the argument adrtxt leads to command injection. The attack ma...
Exploit for OS Command Injection in Php
Fastest CVE-2024-4577 Exploitation Tool Description: PHP C...
Tosei Online Store Management System ๅฝไปคๆณจๅ ฅๆผๆด
Tosei Online Store Management System is an online store management system from Tosei Corporation. A command injection vulnerability exists in Tosei Online Store Management System versions 4.02, 4.03, and 4.04, which stems from the parameter kikaibangou in the file /cgi-bin/toseikikai.php that can...
CVE-2024-7896: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ 4.02/4.03/4.04. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/p1ftpserver.php. The manipulation of the argument adrtxt leads to command injection. The attack ma...
CVE-2024-7897: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as critical has been found in Tosei Online Store Management System ใใใๅบ่็ฎก็ใทในใใ 4.02/4.03/4.04. This affects an unknown part of the file /cgi-bin/toseikikai.php. The manipulation of the argument kikaibangou leads to command injection. It is possible to initiate the attac...
CVE-2024-7849: Buffer Copy without Checking Size of Input
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-...
CVE-2024-7829
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and...
PT-2024-30228
Name of the Vulnerable Software and Affected Versions TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description The issue is related to incorrect access control, allowing attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to...