216 matches found
CVE-2023-43455
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component...
CVE-2023-43455
CVE-2023-43455 affects TOTOLINK X6000R versions V9.4.0cu.652_B20230116 through V9.4.0cu.852_B20230719.** The issue allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component.** Root cause details are not expanded beyond this parameter ha...
CVE-2023-43455: Improper Neutralization of Special Elements used in a Command
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component...
PT-2023-6552 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R versions V9.1.0u.6118 B20201102 through V9.1.0u.6369 B20230113 Description: The issue concerns a command insertion vulnerability in the setting/setTracerouteCfg component of the TOTOLINK X5000R router's firmware. This...
Aigital Wireless-N Repeater Mini_Router security vulnerabilities
Aigital Wireless-N Repeater Mini-Router is a wireless router repeater from Aigital. A security vulnerability exists in Aigital Wireless-N Repeater MiniRouter version v0.131229, which stems from the discovery of a Remote Code Execution RCE vulnerability via the sysCmd parameter in the formSysCmd...
CVE-2022-45030
A SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates.php?command= this may interact with secure-file-priv...
CVE-2023-29798: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function...
Korenix Technology Korenix JetWave: Command Injection Vulnerability
Korenix Technology Korenix JetWave is a family of wireless access points from Korenix Technology. A security vulnerability exists in Korenix Technology Korenix JetWave 4200 Series version 1.3.0, JetWave 3000 Series version 1.6.0. An attacker can exploit the vulnerability to execute commands as ro...
D-Link DIR-610 Command Injection
The vulnerability of the D-Link DIR-610 network device exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the cmd parameter in the...
PT-2022-26882 · Apache · Apache Kylin
Name of the Vulnerable Software and Affected Versions: Apache Kylin affected versions not specified Description: The issue arises from a fix that uses a blacklist to filter user input commands, but this approach is at risk of being bypassed. An attacker can potentially control the command by...
Event Registration System Code Vulnerability
Event Registration System is an event registration system with QR codes by Carlo Montero Personal Developer. A security vulnerability exists in the Event Registration System version 1.0, which stems from an incorrect manipulation of the parameter cmd leading to unrestricted file uploads...
PT-2022-27157
Name of the Vulnerable Software and Affected Versions TOTOLINK LR350 version 9.3.5u.6369 B20220309 Description The issue is a post-authentication buffer overflow that occurs via the command parameter in the setTracerouteCfg function. This allows for potential exploitation after authentication has...
CVE-2022-41523
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function...
CVE-2022-41523
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function...
Stack overflow
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function...
CVE-2022-41523
TOTOLINK NR1800X V9.1.0u.6279B20210910 was discovered to contain an authenticated stack overflow via the command parameter in the setTracerouteCfg function...
CVE-2022-41523
Summary: CVE-2022-41523 affects TOTOLINK NR1800X (version 9.1.0u.6279_B20210910). An authenticated stack overflow in the setTracerouteCfg function via the command parameter could crash the app or allow arbitrary code execution within the application context. The NVD entry assigns a high impact (C...
PT-2022-25010 · Nokia · Nokia 1350 Oms
Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The issue is related to multiple OS Command Injection vulnerabilities. These vulnerabilities allow unauthenticated users to execute commands on the operating system. The vulnerabilities occur via...
