CVE-2022-37129

D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...

Belkin LINKSYS RE6500 Command Injection Vulnerability

The Belkin LINKSYS RE6500 is a wireless router from Belkin USA. A command injection vulnerability exists in Belkin LINKSYS RE6500 devices prior to version 1.0.11.001, which can be exploited to allow a remote authenticated user to execute arbitrary commands via goform system commands...