CVE-2024-42742

CVE-2024-42742 affects TOTOLINK X5000r (v9.1.0cu.2350_b20230313). The vulnerability is in the /cgi-bin/cstecgi.cgi file, setUrlFilterRules function, causing an OS command injection. Authenticated attackers can send a crafted packet to execute arbitrary commands. Public references consistently des...

Exploit for Cross-site Scripting in Bdtask Multi_Store_Inventory_Management_System

CVE-2024-2997 Scanner !Versionhttps://img.shields.io/badge...

CVE-2024-7029

Commands can be injected over the network and executed without authentication. Recent assessments: ccondon-r7 at September 17, 2024 11:39pm UTC reported: TL;DR: Unpatched command injection vulnerability in an end-of-life IP camera, being exploited to drop a Mirai botnet malware variant. Public Po...

TOTOLINK A3600R cstecgi.cgi file setTelnetCfg function command injection vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a command injection vulnerability that originates from improper handling of the telnetenabled parameter in the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file. An...

TOTOLINK A6000R apcli_do_enr_pbc_wps function command injection vulnerability

TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that stems from the ifname parameter in the apclidoenrpbcwps function failing to correctly filter constructed command special characters, commands, and s...

TOTOLINK A6000R Command Injection Vulnerability (CNVD-2025-14789)

The OTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A6000R suffers from a command injection vulnerability that originates from a command injection that can be performed via the cmd parameter in the webcmd function. No details of the vulnerability are...

CVE-2024-41468

Tenda FH1201 device (v1.2.0.14) is affected by a command injection vulnerability in the /goform/exeCommand endpoint, exploitable via the cmdinput parameter. The underlying issue is improper filtering of constructed command characters, allowing arbitrary commands to be executed on the device. Publ...

CVE-2024-41315

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

CVE-2024-41320

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the getapcliconninfo function...

CVE-2024-41315

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

CVE-2024-41320

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the getapcliconninfo function...

D-Link DAP-1325 Command Injection Vulnerability (CNVD-2024-33895)

The D-Link DAP-1325 is a wireless access point/bridge from China's AUO D-Link, which is primarily used to provide wireless network coverage and has a bridging function that allows you to convert a wired network to a wireless network or connect two wireless networks together. The D-Link DAP-1325...

D-Link DIR-2150 Command Injection Vulnerability

The D-Link DIR-2150 is a wireless router from China-based AUO D-Link. The D-Link DIR-2150 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DIR-2640 Command Injection Remote Code Execution Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router manufactured by the Chinese company AUO D-Link, which is mainly used to provide wireless network connectivity. The D-Link DIR-2640 suffers from a command injection remote code execution vulnerability that stems from the PrefixLen command injection...

D-Link DIR-2640 Command Injection Vulnerability

The D-Link DIR-2640 is a high-power Wi-Fi router from Taiwan, China's AUO D-Link that supports the AC2600 WiFi standard with dual-band 2.4GHz and 5GHz network transmission. The D-Link DIR-2640 suffers from a command injection vulnerability, which stems from the DestNetwork command injection remot...

Siemens SINEMA Remote Connect Server Command Injection Vulnerability (CNVD-2024-32689)

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. Siemens SINEMA Remote Connect Server suffers from a command injection vulnerability that can be...

Siemens SINEMA Remote Connect Client Command Injection Vulnerability

SINEMA Remote Connect is a management platform for remote networks that makes it simple to manage tunneled connections VPN between headquarters, service technicians and installed machines or plants. A command injection vulnerability exists in the Siemens SINEMA Remote Connect Client, which can be...

MOXA OnCell G3470A-LTE Command Injection Vulnerability

MOXA OnCell G3470A-LTE is a series of cellular gateway/router from MOXA China. A command injection vulnerability exists in MOXA OnCell G3470A-LTE v1.7.7 and earlier firmware versions, which stems from the lack of a neutralization input in the Web Key Upload function, and can be exploited by an...

CVE-2024-39209

luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter...

CVE-2024-39209

The CVE-2024-39209 entry concerns luci-app-sms-tool v1.9-6, which has a command injection vulnerability exploitable via the score parameter. The issue is documented across multiple feeds (NVD, Red Hat, CVE lists). Affected component: luci-app-sms-tool, version 1.9-6. Root cause: command injection...