CVE-2024-57228

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2024-57212

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the actionreboot function...

CVE-2024-57224

The Linksys E7350 wireless router (version 1.1.00.032 ) contains a command injection vulnerability within the apcli_do_enr_pin_wps function. The flaw exists due to improper handling of the ifname parameter, which allows a remote attacker to submit a specially crafted request to execute arbitrary ...

CVE-2024-57211

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...

CVE-2024-57227

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...

CVE-2024-57227

The Linksys E7350 router, specifically version 1.1.00.032 , is vulnerable to a command injection flaw. The vulnerability exists within the apcli_do_enr_pbc_wps function due to the improper neutralization of special elements in the ifname parameter. This flaw allows for potential exploitation of t...

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

CVE-2024-57211

The TOTOLINK A6000R wireless router (version V1.0.1-B20201211.2000 ) is vulnerable to a command injection vulnerability. The flaw exists in the handling of the modifyOne parameter within the enable_wsh function, which allows a remote attacker to submit a specially crafted request to execute arbit...

CVE-2024-57213

The TOTOLINK A6000R wireless router, specifically version V1.0.1-B20201211.2000 , is vulnerable to a command injection flaw. The issue resides in the action_passwd function, where improper neutralization of special elements in the newpasswd parameter allows a remote attacker to submit a special r...

CVE-2024-57212

The TOTOLINK A6000R (version V1.0.1-B20201211.2000 ) contains a command injection vulnerability (CWE-77) located in the action_reboot function. The flaw exists due to improper handling of the opmode parameter, which a remote attacker could exploit by submitting a specially crafted request to exec...

CVE-2024-57211

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...

CVE-2024-57228

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2024-57222

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

CVE-2024-43656

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – It might be difficult for an attacker to identify the fil...

CVE-2024-43654

CVE-2024-43654 affects Iocharger AC EV charging stations running firmware older than 25010801. The issue is an improper neutralization of a special element used in a command, enabling OS command injection with root privileges. The vulnerability can be exploited via a network-attached interface se...

CVE-2024-43651 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...

Exploit for Incorrect Authorization in Cacti

Cacti v1.2.22: Unauthenti...

BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-10)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by a command injection vulnerability. - All BeyondTrust Remote Support RS versions contain a command injection vulnerability which can be exploited through a...

CVE-2024-22063

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices...