84 matches found
CVE-2024-57226
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...
CVE-2024-57228: Improper Neutralization of Special Elements used in a Command
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
PT-2025-3419 · Linksys · Linksys E7350
Name of the Vulnerable Software and Affected Versions: Linksys E7350 version 1.1.00.032 Description: A command injection issue was discovered via the iface parameter in the vif disable function. This allows for potential exploitation. No information is provided about the estimated number of...
CVE-2024-44466
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability in function sub424CB4. Attackers can send POST request messages to /usr/bin/webmgnt and inject commands into parameter iface...
CVE-2024-41314
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
CVE-2024-41314
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...
TOTOLINK A6000R 安全漏洞
TOTOLINK A6000R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A6000R. The vulnerability stems from the iface parameter in the vifdisable function failing to properly validate or clear user input. An attacker can use this...
CVE-2024-41314
The TOTOLINK A6000R router, specifically version V1.0.1-B20201211.2000 , is susceptible to a command injection vulnerability in the vif_disable function. The root cause is the lack of proper neutralization or validation of special elements in the iface parameter, which allows an attacker to execu...
CVE-2024-37626
A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...
CVE-2024-37626
A command injection issue in TOTOLINK A6000R V1.0.1-B20201211.2000 firmware allows a remote attacker to execute arbitrary code via the iface parameter in the vifenable function...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
CVE-2023-31851
Cudy LT400 1.13.4 is has a cross-site scripting XSS vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter...
CVE-2023-31852
Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting XSS in cgi-bin/luci/admin/network/wireless/config via the iface parameter...
Cross site scripting
Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting XSS in cgi-bin/luci/admin/network/wireless/config via the iface parameter...
CVE-2023-31852
CVE-2023-31852 affects Cudy LT400 firmware 1.13.4. The issue is a Cross Site Scripting (XSS) vulnerability in the web interface at cgi-bin/luci/admin/network/wireless/config, exploitable via the iface parameter. Connected documents confirm the affected product/version and the vulnerable parameter...
CVE-2023-31852
Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting XSS in cgi-bin/luci/admin/network/wireless/config via the iface parameter...
Cudy Technology LT400 跨站脚本漏洞
The Cudy Technology LT400 is a wireless router from the Chinese company Cudy Technology. A security vulnerability exists in the Cudy Technology LT400 version 1.13.4, which originates from a security issue in the iface parameter in /cgi-bin/luci/admin/network/wireless/status...