Lucene search
+L

18765 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/13 3:00 a.m.3 views

CVE-2026-6154

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument wizard results in os command injection. The attack may be initiat...

10CVSS7AI score0.01823EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/04/13 2:33 a.m.10 views

MINI-GW7G-5GPP-R98W

Bulletin has no description...

7.5CVSS5.7AI score0.00615EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/04/13 12:00 a.m.12 views

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU 7.4cu.2313b20191024 version contains a vulnerability related to operating system command injection. This vulnerability arises from improper handling of the parameter “wizard” in the function...

10CVSS7.3AI score0.01823EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/13 12:00 a.m.15 views

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU 7.4cu.2313b20191024 version contains a vulnerability related to operating system command injection. This vulnerability stems from improper handling of the parameter “FileName” in the function...

10CVSS7.3AI score0.01823EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/12 10:30 p.m.5 views

CVE-2026-6132 Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection

A vulnerability was determined in Totolink A7100RU 7.4cu.2313b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument enable causes os command injection. Remote exploitation of the attack is...

10CVSS5.5AI score0.02175EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/12 8:17 p.m.7 views

MINI-GW62-FVJF-2MPF

Bulletin has no description...

8.8CVSS5.7AI score0.0034EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/04/12 3:00 a.m.48 views

CVE-2026-6113 Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected by this vulnerability is the function setTtyServiceCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument ttyEnable leads to os command injection. The attack...

10CVSS0.01803EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/12 12:00 a.m.14 views

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The Totolink A7100RU 7.4cu.2313b20191024 version has a vulnerability related to operating system command injection. This vulnerability stems from the improper handling of the parameter “ip” in the setDiagnosisCfg...

10CVSS7.3AI score0.01803EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/12 12:00 a.m.13 views

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The Totolink A7100RU 7.4cu.2313b20191024 version has a vulnerability related to operating system command injection. This vulnerability stems from an improper handling of the parameter maxRtrAdvInterval in the...

10CVSS7.3AI score0.01766EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/12 12:00 a.m.10 views

PT-2026-32190

Name of the Vulnerable Software and Affected Versions Totolink A7100RU version 7.4cu.2313 b20191024 Description A flaw exists in the CGI Handler component of the Totolink A7100RU router. Specifically, the setLedCfg function within the /cgi-bin/cstecgi.cgi file is susceptible to OS command injecti...

10CVSS7.2AI score0.02175EPSS
SaveExploits0References11
OSV
OSV
added 2026/04/11 3:47 p.m.11 views

MINI-GWXM-W999-JQQJ

Bulletin has no description...

5.5CVSS5.7AI score0.0029EPSS
SaveExploits0
OSV
OSV
added 2026/04/11 3:32 p.m.7 views

MINI-GW35-3948-QW36

Bulletin has no description...

7.5CVSS5.7AI score0.00621EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/04/11 2:17 p.m.48 views

GHSA-HR2V-4R36-88HR vulnerabilities

Vulnerabilities for packages: chart-testing-fips, cert-manager-cmctl-fips, headlamp-fips, cluster-api-helm-controller, envoy-gateway, helm-exporter-fips, zot, chartmuseum-fips, helm-diff, gitlab-operator-fips, consul-k8s, chaos-mesh, harbor, chartmuseum, cert-manager-cmctl, k9s-fips, kubescape,...

5.9AI score
SaveExploits0
NVD
NVD
added 2026/04/11 1:16 a.m.11 views

CVE-2026-3689

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the pa...

6.5CVSS0.00944EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/11 12:17 a.m.47 views

CVE-2026-3689 OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the pa...

6.5CVSS0.00944EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/11 12:17 a.m.56 views

CVE-2026-3689

OpenClaw Canvas contains a path traversal information disclosure in the canvas gateway endpoint due to improper validation of user-supplied path parameters. The issue, affecting OpenClaw Canvas (various versions), can allow remote attackers to disclose sensitive information within the service acc...

6.5CVSS6.5AI score0.00944EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/11 12:17 a.m.5 views

CVE-2026-3689

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the pa...

6.5CVSS6.5AI score0.00944EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/11 12:17 a.m.8 views

CVE-2026-3689 OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the pa...

6.5CVSS5.9AI score
SaveExploits0References4
EUVD
EUVD
added 2026/04/11 12:17 a.m.11 views

EUVD-2026-21619

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenClaw. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the pa...

6.5CVSS6.5AI score0.00944EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/10 7:24 p.m.11 views

EUVD-2026-21168

PraisonAI: Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls...

7.9CVSS5.8AI score0.00227EPSS
SaveExploits1References3
Rows per page
Query Builder