CVE-2024-10195: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goformgetcmdprocess of the component SMS Check. The manipulation of the argument orderby leads to sql injection...

Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks

Google has revealed the various security guardrails that have been incorporated into its latest Pixel devices to counter the rising threat posed by baseband security attacks. The cellular baseband i.e., modem refers to a processor on the device that's responsible for handling all connectivity, su...

CVE-2024-44667

Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2v1.0.1557.15.35P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access...

CVE-2024-44667

Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2v1.0.1557.15.35P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access...

CVE-2024-44667: Incorrect Authorization

Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router M7628NNxISPxUIv2v1.0.1557.15.35P0 is vulnerable to Incorrect Access Control. Unauthenticated factory mode reset and command injection leads to information exposure and root shell access...

CVE-2024-44667

The Shenzhen Haichangxing Technology Co., Ltd HCX H822 4G LTE Router (version M7628NNxISPxUIv2_v1.0.1557.15.35_P0 ) is affected by an Incorrect Access Control vulnerability. This flaw allows for unauthenticated factory mode reset and command injection , which can lead to information exposure and ...

CVE-2024-41976: Improper Input Validation

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.1, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.1, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.1, SCALANCE M812-1 ADSL-Router family All versions V8.1, SCALANCE M816-1...

CVE-2024-41977: Exposure of Data Element to Wrong Session

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.1, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.1, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.1, SCALANCE M812-1 ADSL-Router family All versions V8.1, SCALANCE M816-1...

TOTOLINK LR1200 Hardcoded Password Vulnerability

The TOTOLINK LR1200 is a wireless router designed for 4G LTE networks. The TOTOLINK LR1200 suffers from a hard-coded password vulnerability that originates from the /etc/shadow.sample page containing a use of hard-coded passwords. No details of the vulnerability are provided at this time...

UBUNTU-CVE-2021-47366

In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a corruption when reading fpos 2G-4G from an OpenAFS server...

CVE-2024-35988 riscv: Fix TASK_SIZE on 64-bit NOMMU

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix TASKSIZE on 64-bit NOMMU On NOMMU, userspace memory can come from anywhere in physical RAM. The current definition of TASKSIZE is wrong if any RAM exists above 4G, causing spurious failures in the userspace access...

D-Link G416 安全漏洞

The D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 and supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a command injection remote code execution vulnerability that stems from the flup lfilena...

D-Link G416 安全漏洞

The D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 and supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a command injection remote code execution vulnerability that originates in an HTTP servi...

CVE-2024-2415

Command injection vulnerability in Movistar 4G router affecting version ESWLD71-T1v2.0.201820. This vulnerability allows an authenticated user to execute commands inside the router by making a POST request to the URL '/cgi-bin/gui.cgi'...

CVE-2024-2416

Cross-Site Request Forgery vulnerability in Movistar's 4G router affecting version ESWLD71-T1v2.0.201820. This vulnerability allows an attacker to force an end user to execute unwanted actions in a web application in which they are currently authenticated...

CVE-2024-2414

The primary channel is unprotected on Movistar 4G router affecting E version SWLD71-T1v2.0.201820. This device has the 'adb' service open on port 5555 and provides access to a shell with root privileges...

CVE-2024-2415 Command injection vulnerability in Movistar 4G router

Command injection vulnerability in Movistar 4G router affecting version ESWLD71-T1v2.0.201820. This vulnerability allows an authenticated user to execute commands inside the router by making a POST request to the URL '/cgi-bin/gui.cgi'...

CVE-2024-2415 Command injection vulnerability in Movistar 4G router

Command injection vulnerability in Movistar 4G router affecting version ESWLD71-T1v2.0.201820. This vulnerability allows an authenticated user to execute commands inside the router by making a POST request to the URL '/cgi-bin/gui.cgi'...

CVE-2024-2415

CVE-2024-2415 affects Movistar 4G router ES_WLD71-T1_v2.0.201820. Root cause is a command injection via an authenticated POST to the endpoint /cgi-bin/gui.cgi, allowing command execution inside the router. Impact is high (authenticated local command execution). Remediation/mitigation: apply vendo...