MeiG FORGE_SLT711 GoAhead blind OS command injection (CVE-2026-36356)

Unauthenticated blind OS command injection in MeiG Smart FORGESLT711 Ortel 4G LTE CPE and related MDM9607 firmware. The GoAhead endpoint POST /action/SetRemoteAccessCfg passes the JSON password field to sprintf"echo root:"%s"|chpasswd" and system as root. !/usr/bin/env python3 -- coding: utf-8 --...

EUVD-2017-9292

Malware in sbrugna...

EUVD-2019-5266

Malware in sbrugna...

EUVD-2019-5354

Malware in sbrugna...

EUVD-2018-17636

Malware in sbrugna...

EUVD-2019-5308

Malware in sbrugna...

EUVD-2018-5844

Malware in sbrugna...

EUVD-2020-24918

Malware in sbrugna...

EUVD-2017-9401

Malware in sbrugna...

EUVD-2018-17681

Malware in sbrugna...

EUVD-2018-3996

Malware in sbrugna...

EUVD-2019-5307

Malware in sbrugna...

EUVD-2019-5293

Malware in sbrugna...

EUVD-2019-2321

Malware in sbrugna...

EUVD-2019-11879

Malware in sbrugna...

EUVD-2017-9403

Malware in sbrugna...

EUVD-2018-3308

Malware in sbrugna...

EUVD-2019-11889

Malware in sbrugna...

EUVD-2017-9259

Malware in sbrugna...

CVE-2019-14001

Wrong public key usage from existing oemkeystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096AU, MDM9206, MDM9207C, MDM9607, MDM9650, MSM8905,...