1888 matches found
CVE-2024-57222
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...
CVE-2024-57214
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
CVE-2024-57211
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...
CVE-2024-57212
TOTOLINK A6000R firmware version V1.0.1-B20201211.2000 contains a command‑injection vulnerability in the opmode parameter of the action_reboot function. Multiple connected sources confirm the flaw, with references describing that an attacker can influence command execution via this parameter. The...
CVE-2024-57211
CVE-2024-57211 affects TOTOLINK A6000R V1.0.1-B20201211.2000. A vulnerability in the modifyOne parameter of the enable_wsh function allows a command injection: remote attacker could submit a crafted request to execute arbitrary commands. The CVSSv3.1 vector indicates AV:A/AC:L/PR:L/UI:N/S:U/C:H/I...
CVE-2024-57224
CVE-2024-57224 affects Linksys E7350 firmware
CVE-2024-57227
CVE-2024-57227 affects Linksys E7350 firmware
CVE-2024-57213
CVE-2024-57213 affects TOTOLINK A6000R V1.0.1-B20201211.2000, with a command injection in the action_passwd function via the newpasswd parameter. Root cause is improper handling of newpasswd, enabling a remote attacker to execute arbitrary commands in the application context. According to connect...
CVE-2024-57227
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...
CVE-2024-57211
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...
CVE-2024-43656
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – It might be difficult for an attacker to identify the fil...
CVE-2024-43651 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...
CVE-2024-43654
CVE-2024-43654 affects Iocharger AC EV charging stations running firmware older than 25010801. The issue is an improper neutralization of a special element used in a command, enabling OS command injection with root privileges. The vulnerability can be exploited via a network-attached interface se...
Exploit for Incorrect Authorization in Cacti
Cacti v1.2.22: Unauthenti...
BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-10)
The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by a command injection vulnerability. - All BeyondTrust Remote Support RS versions contain a command injection vulnerability which can be exploited through a...
CVE-2024-22063
The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices...
CVE-2024-22063 ZTE ZENIC ONE R58 product has a CSV injection vulnerability
The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices...
CVE-2024-22063
The CVE-2024-22063 entry concerns ZTE ZENIC ONE R58 devices, describing a command-injection vulnerability. According to the connected sources, an authenticated attacker could tamper with messages and inject malicious code, potentially enabling further attacks on related devices. The available doc...
CVE-2024-12987
CVE-2024-12987 affects DrayTek Vigor2960 and Vigor300B running firmware 1.5.1.4, where the Web Management Interface endpoint /cgi-bin/mainfunction.cgi/apmcfgupload processes the session parameter in an insecure way, enabling OS command injection. The issue is exploitable remotely and has public e...
