CVE-2021-27708

Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system...

CVE-2024-27708

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter...

CVE-2024-27708

creationtimestamp| type| source ---|---|--- 2025-12-22 21:45:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mam7fccghq22...

CVE-2024-27708

Iframe injection vulnerability in airc.pt/solucoes-servicos.solucoes MyNET v.26.06 and before allows a remote attacker to execute arbitrary code via the src parameter...

CVE-2024-27708

The MyNET online management system from AIRC Portugal, specifically versions 26.06 and earlier , is susceptible to an iframe injection vulnerability. A remote attacker can exploit the src parameter to execute arbitrary code . To remediate this issue, users are recommended to update to a version n...

CVE-2021-27708

CVE-2021-27708 describes a command injection in TOTOLINK X5000R (firmware v9.1.0u.6118_B20201102) and TOTOLINK A720R (firmware v4.1.5cu.470_B20200911). The issue arises when the code calls glibc’s system() with untrusted input and passes the attacker-controlled "+command" parameter directly, enab...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-27708. Reason: This candidate is a reservation duplicate of ID. Notes: All CVE users should reference CVE-2020-27708 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2020-16091

CVE-2020-16091 is a reservation duplicate of CVE-2020-27708. Connected records describe a vulnerability in the Origin Client that could allow a non-administrative user to elevate privileges to Administrator or System, enabling control of the system. There are no vendor/version specifics or remedi...

CVE-2020-27708

Origin Client contains a privilege-escalation vulnerability that could allow a non-administrative user to obtain Administrator or System rights, enabling control of the system and actions reserved for high-privileged users. The CVE-2020-27708 entry is corroborated by multiple connected sources (N...