PT-2025-52213

Name of the Vulnerable Software and Affected Versions 1C-Bitrix versions prior to 25.100.501 Description The software contains a remote code execution issue within the Translate Module. The application does not properly validate the contents of archive files before unpacking them, allowing...

CVE-2024-48074

An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function...

CVE-2024-48074

The DrayTek Vigor2960 router (version 1.4.4 ) is vulnerable to Remote Code Execution (RCE) due to the improper neutralization of special elements used in operating system commands. An attacker can inject a specially crafted command into the table parameter of the doPPPoE function located in the c...