1888 matches found
Dell SmartFabric OS10 Command Injection Vulnerability (CNVD-2025-02566)
Dell SmartFabric OS10 is a Debian Linux-based network operating system from Dell Networking designed to run on its PowerSwitch platform. A command injection vulnerability exists in Dell SmartFabric OS10 that stems from the system not filtering and validating user input at command execution. An...
PAN-OS: Arbitrary File Delete Vulnerability in the Command Line Interface (CLI)
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions in the management plane and delete files on the firewall. Work around: We strongly recommend customers to ensure access to your management interface is...
CVE-2024-50852
CVE-2024-50852 affects Tenda G3, version 3.0 v15.11.0.20. The vulnerability is a command injection in the formSetUSBPartitionUmount function, arising because usbPartitionName handling fails to neutralize special characters/commands. Impact: allows a remote attacker to execute arbitrary commands. ...
CVE-2024-50853
CVE-2024-50853 affects Tenda G3 firmware (version 3.0, v15.11.0.20). The vulnerability is a command injection in the formSetDebugCfg function caused by improper filtering of parameters (enable, level, module). Exploitation may allow an attacker to execute arbitrary commands via a crafted POST req...
Hitachi Energy TRO600
RISK EVALUATION Command injection vulnerability in the Edge Computing UI for the TRO600 series radios that allows for the execution of arbitrary system commands. If exploited, an attacker with write access to the web UI can execute commands on the device with root privileges, far more extensive...
Zoraxy 操作系统命令注入漏洞
Zoraxy is a general-purpose HTTP reverse proxy and forwarding tool from the individual developer Toby Chui. An operating system command injection vulnerability exists in Zoraxy versions 2.6.1 through 3.1.2 that originates from allowing an authenticated attacker to execute arbitrary commands as ro...
wfa_dut 安全漏洞
wfadut JC6 is software from the Wi-Fi Alliance USA. A security vulnerability exists in wfadut version 9.0.0 and earlier, which stems from the use of system library functions that are vulnerable to OS command injection...
CISA Adds Four Known Exploited Vulnerabilities to Catalog
Updated November 8, 2024 CISA has removed the following vulnerability from its Known Exploited Vulnerabilities Catalog, due to a transcription error: CVE-2021-4043link is external Motion Spell GPAC Null Pointer Dereference Vulnerability End of Update CISA has added four new vulnerabilities to its...
NETGEAR R8500 bsw_fix.cgi Component Command Injection Vulnerability
The NETGEAR R8500 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R8500 v1.0.2.160, which stems from the wangateway parameter in the bswfix.cgi component failing to correctly filter constructed command special characters, commands, and so on. An attacker...
NETGEAR XR300 wiz_dyn.cgi component command injection vulnerability
The NETGEAR XR300 is a wireless router from NETGEAR. NETGEAR XR300 version v1.0.3.78 suffers from a command injection vulnerability that stems from the systemname parameter in the wizdyn.cgi component failing to properly filter constructed command special characters, commands, and so on. An...
CVE-2024-50993
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at adminaccount.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...
DrayTek Vigor 3900 安全漏洞
DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...
Tenda AX2 Pro Operating System Command Injection Vulnerability
Tenda AX2 Pro is a home user designed entry-level Gigabit Wi-Fi 6 router from Tenda China. The Tenda AX2 Pro suffers from an operating system command injection vulnerability that can be exploited by an attacker to execute commands by building a malicious payload...
Tenda AC7 ate_ifconfig_set function command injection vulnerability
Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a command injection vulnerability that stems from ateifconfigset failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited to execute arbitrary command...
High-Severity Command Injection Vulnerability in run_BingBertSquad.sh
This report is not public...
PT-2024-7608
Name of the Vulnerable Software and Affected Versions Synology BeePhotos versions prior to 1.0.2-10026 and 1.1.0-10053 Synology Photos versions prior to 1.6.2-0720 and 1.7.0-0795 Description The issue is related to improper neutralization of special elements used in a command, also known as a...
CVE-2024-48440
Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered to contain a command injection vulnerability via the component atcommand.asp...
CVE-2024-48440
Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered to contain a command injection vulnerability via the component atcommand.asp...
D-Link DIR-878 and D-Link DIR-882 Command Injection Vulnerability (CNVD-2024-41693)
The D-Link DIR-878 is a wireless router.The D-Link DIR-882 is a dual-band wireless router. A command injection vulnerability exists in the D-Link DIR-878 and D-Link DIR-882, which can be exploited by an attacker to execute arbitrary operating system commands via a constructed POST request...
D-Link DIR-878 and D-Link DIR-882 Command Injection Vulnerability
The D-Link DIR-878 is a wireless router.The D-Link DIR-882 is a dual-band wireless router. A command injection vulnerability exists in the D-Link DIR-878 and D-Link DIR-882, which can be exploited by an attacker to execute arbitrary operating system commands via a constructed POST request...