TOTOLINK X2000R Command Injection Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version has a command injection vulnerability. This vulnerability stems from the OS command injection present in the boa formUpload function. Authorized attackers can execute arbitrary code through specially crafted HTTP requests...

PT-2024-12481 · Realtek · Realtek Rtl819X Jungle Sdk

Name of the Vulnerable Software and Affected Versions: Realtek rtl819x Jungle SDK version 3.4.11 Description: A firmware update vulnerability exists in the boa formUpload functionality. A specially crafted network packet can lead to arbitrary firmware update. An attacker can provide a malicious...