CVE-2022-28905

TOTOLink N600R (versions including V5.3c.7159_B20190425) contains a command injection vulnerability reachable through the devicemac parameter in the /setting/setDeviceName API. The root cause is an unsafely handled input in the devicemac field, enabling arbitrary command execution on the device. ...

CVE-2022-28906

Summary: CVE-2022-28906 affects TOTOLink N600R routers (V5.3c.7159_B20190425). A command-injection vulnerability exists in the /setting/setLanguageCfg API endpoint, exploitable via the langtype parameter. The issue allows an attacker to potentially execute arbitrary commands on the device, with n...

CVE-2022-28906

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...

PT-2022-19300 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLink N600R version V5.3c.7159 B20190425 Description: A command injection issue was found via the devicemac parameter in the "/setting/setDeviceName" API endpoint. This allows for potential command execution on the device. Recommendations:...

CVE-2022-28905: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicemac parameter in /setting/setDeviceName...

CVE-2022-28910: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the devicename parameter in /setting/setDeviceName...

CVE-2022-28911: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/CloudACMunualUpdate...

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the filename parameter in /setting/setUpgradeFW...

PT-2022-3184

Name of the Vulnerable Software and Affected Versions IntelR Boot Guard and IntelR TXT affected versions not specified Description The issue is related to the implementation of IntelR Boot Guard and IntelR TXT technologies in IntelR processors, which may allow an unauthenticated user to potential...

CVE-2022-28912: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUpgradeFW...

TOTOLINK N600R 操作系统命令注入漏洞

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK, which is vulnerable to a command injection attack via the webwlanidx parameter in /setting/setWebWlanIdx...

CVE-2022-28913: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the filename parameter in /setting/setUploadSetting...

CVE-2022-28909: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the webwlanidx parameter in /setting/setWebWlanIdx...

CVE-2022-28906: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...

CVE-2022-28908: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the ipdoamin parameter in /setting/setDiagnosisCfg...

KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass

Overview Screen Creator Advance2 provided by KOYO ELECTRONICS INDUSTRIES CO., LTD. is a screen development tool for KOYO ELECTRONICS's HMI. Screen Creator Advance2 contains an authentication bypass vulnerability CWE-807 due to the improper check for the Remote control setting's account names. KOY...

Exploit for Code Injection in Mybb

CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP...

CVE-2022-28972

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function formfastsettingwifiset. This vulnerability allows attackers to cause a Denial of Service DoS...

PT-2022-19335

Name of the Vulnerable Software and Affected Versions Tenda AX1806 version 1.0.0.1 Description The issue is related to a stack overflow via the timeZone parameter in the form fast setting wifi set function, allowing attackers to cause a Denial of Service DoS. Recommendations For Tenda AX1806...

PT-2022-3366

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.196318 Description The issue is related to a stack-based buffer overflow vulnerability in the form fast setting wifi set function of the Tenda AC18 router's firmware. This vulnerability is caused by an out-of-bounds...