CVE-2026-51740

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51740: Improper Access Control

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51740

The TOTOLINK T6 wireless dual-band Mesh router, specifically version 4.1.5cu.748_B20211015 , is vulnerable to an incorrect access control flaw within the killProcess function. An unauthenticated attacker can exploit this by sending a crafted POST request to /cgi-bin/cstecgi.cgi, leading to the te...

CVE-2026-51740

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

PT-2026-83979

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the killProcess function allows unauthenticated attackers to terminate critical services. This is achieved by sending a crafted POST request to the...

CVE-2026-51740

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68741

Incorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to terminate critical services via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2005-2948

Malware in sbrugna...

EUVD-2005-2947

Malware in sbrugna...

CVE-2021-23348

This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23348 Arbitrary Command Injection

This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23348

This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23348: Improper Neutralization of Special Elements used in an OS Command

This affects the package portprocesses before 1.0.5. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

Arbitrary Command Injection

Overview portprocesses is a This tool letes you list and kill processes on a specified port. Affected versions of this package are vulnerable to Arbitrary Command Injection. If attacker-controlled user input is given to the killProcess function, it is possible for an attacker to execute arbitrary...

CVE-2012-6501

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

Code injection

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

CVE-2012-6501

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

CVE-2012-6501: Improper Input Validation

The KillProcess method in the HP PKI ActiveX control HPPKI.ocx before 1.2.0.1 allows remote attackers to cause a denial of service kill process via the partial or full name of a process...

HP PKI ActiveX Control KillProcess Denial of Service

The version of the HP PKI ActiveX control installed on the remote Windows host is earlier than 1.2.0.1. As such, it reportedly contains an insecure method named 'KillProcess' that could be used to terminate arbitrary user processes. C Tenable Network Security, Inc. include"compat.inc"; if...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...