Microsoft 365 Copilot Disclosure

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

WAVLINK WL-WN578W2 Script Command Execution

The vulnerability of the /cgi-bin/wireless.cgi microprogramming system of the WAVLINK WL-WN578W2 amplifier is related to the lack of measures taken at the control level for data cleaning. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary commands...

Wavlink NU516U1 Arbitrary Command Execution

The vulnerability of sub4016F0 in the microprogrammed Wavlink NU516U1 router software is related to the failure to take measures for data cleaning at the control level when processing the delflag argument. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands via PO...

SmartFabric OS10 Command Execution

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-link DIR-878A1 Router SetNetworkSettings Command Execution

The vulnerability of the SetNetworkSettings function in the prog.cgi script of the D-link DIR-878A1 router’s microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary comman...

TOTOLINK X6000R Sub Function Arbitrary Command Execution

The vulnerability of the sub417D74 function in the microprogrammed software of TOTOLINK X6000R routers is related to the lack of measures taken to clean data at the control level when processing the parameter filename. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

Versa Director Shell-Connect Command Execution

The vulnerability of the shell-connect.py file on the software platform for managing network infrastructure, Versa Director, is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands through the...

DEVICE_PING command in the Unauthorized Access

The vulnerability of the DEVICEPING command in the monitoring and management tool for solar energy systems, Tigo Cloud Connect Advanced CCA, is related to the lack of data cleaning at the control level during the processing of the final endpoint /cgi-bin/mobileapi. Exploiting this vulnerability c...

Tenda CP3 IP camera Sub F3C8C Code Execution

The vulnerability of the subF3C8C function in the Tenda CP3 IP camera software relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TOTOLINK T8 recvSlaveCloudCheckStatus() Arbitrary Command Execution

The vulnerability of the recvSlaveCloudCheckStatus function in the microprogramming software for TOTOLINK T8 routers is related to the lack of measures taken to clean data at the management level when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to execute...

D-Link DI-8004W Router Arbitrary Command Execution

The vulnerability of the upgradefilterasp function in D-Link DI-8004W router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DNS-120 Arbitrary Command Execution

The vulnerability of the cgiFMTR12R53rdDiskMGR function /cgi-bin/hdconfig.cgi in the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04...

Siemens SICAM Processor Code Execution

The vulnerability of the CPCI85 and SICORE processor module management systems from Siemens SICAM lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

D-LINK DIR-806 Command Execution

The vulnerability of the D-LINK DIR-806 wireless router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-5415 · D Link · D-Link Dir-806

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-806 versions DIR806A1 FW100CNb11 Description: The issue is related to a lack of proper data cleaning at the management level, which can be exploited by a remote attacker to execute arbitrary commands using the HTTP ST parameter. Th...

TP-Link TL-WPA4530 V2 Code Execution

The vulnerability of the httpRpmPlcDeviceAdd function in the microprogrammed software of the TP-Link TL-WPA4530 V2 device is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Wi-Fi Aruba Instant Arbitrary Command Execution

The vulnerability of the Wi-Fi Aruba Instant deployment application is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted data...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

TP-Link M7350 Router Arbitrary Command Execution

The vulnerability of TP-Link M7350 router’s microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands until authentication is completed...