CVE-2024-33789

creationtimestamp| type| source ---|---|--- 2024-05-06 10:40:00+00:00| published-proof-of-concept| https://t.me/HackingInsights/86 2024-05-06 13:34:11+00:00| published-proof-of-concept| https://t.me/HackingInsights/91 2024-05-06 19:10:12+00:00| published-proof-of-concept| https://t.me/proxybar/20...

CVE-2024-33789

CVE-2024-33789 affects Linksys E5600 firmware v1.1.0.26, with a command injection vulnerability in the /API/info endpoint exploitable via the ipurl parameter. Root cause: improper handling/filtering of command-related characters in ipurl within runtime.pingTest(), enabling arbitrary command execu...

CVE-2024-33789

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint...