1893 matches found
CVE-2025-28203
The Victure RX1800 wireless router, specifically version EN_V1.0.0_r12_110933 , contains a command injection vulnerability (CWE-94). This flaw allows for the improper control of code generation, which could lead to unauthorized command execution. The vulnerability has a High base severity score o...
CVE-2025-45491
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter...
NETGEAR RAX50 Command Injection Vulnerability
The NETGEAR RAX5 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR RAX50. The vulnerability stems from improper handling of the ifname parameter in the apclidoenrpinwps function, which can be exploited by an attacker to launch an attack and cause the syste...
Tenda AC9 Command Injection Vulnerability
Tenda AC9 is a router firmware. Tenda AC9 suffers from a command injection vulnerability that stems from improper handling of the Telnet function, which could lead to the execution of arbitrary commands. No detailed vulnerability details are provided at this time...
openssh security update
An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
CVE-2025-43842
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7, trainsetdir4 and sr2 take user input and pass it to the preprocessdataset function, which concatenates them into a...
CVE-2025-45042
Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function...
CVE-2024-57230
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...
CVE-2024-57229
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
CVE-2024-57235
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
TOTOLINK A830R Command Injection Vulnerability (CNVD-2025-09866)
The TOTOLINK A830R is a wireless dual-band router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A830R version V4.1.2cu.5182B20201102, which stems from the failure of the NoticeUrl parameter in the setNoticeCfg function to correctly filter constructed...
TOTOLINK A800R Command Injection Vulnerability (CNVD-2025-09933)
TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A800R suffers from a command injection vulnerability that stems from the QUERYSTRING parameter in downloadFile.cgi failing to correctly filter constructed command special characters, commands, and so on. No...
CVE-2025-45490
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...
CVE-2025-45488
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter...
CVE-2025-22476
Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...
PT-2025-19930 · D Link · D-Link Dir-806A1 +1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L versions up to 100CNb11 D-Link DIR-806A1 versions up to 108B03 Description: A critical issue has been detected, affecting the function sub 175C8 of the file /htdocs/soap.cgi. This issue leads to command injection and can be...
CVE-2025-45489
CVE-2025-45489 affects Linksys E5600 firmware v1.1.0.26. A command injection vulnerability exists in the runtime.ddnsStatus DynDNS function exposed via the hostname parameter. According to sources, exploitation could impact confidentiality, integrity, and availability; CVSS vectors indicate netwo...
PT-2025-20006 · Apache · Apache Struts
Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...