10245 matches found
MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?
MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...
MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?
MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...
CVE-2023-32621
WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...
Design/Logic Flaw
WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...
CVE-2023-32622
The WAVLINK WL-WN531AX2 router is affected by CVE-2023-32622 (and related CVEs in the same advisory) for firmware versions prior to 2023526. The root cause is improper neutralization of special elements in the firmware, enabling an attacker with administrative privileges to execute OS commands wi...
CVE-2023-32621
WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege...
CVE-2023-32621
Summary of CVE-2023-32621 (WAVLINK WL-WN531AX2): The vulnerability affects WL-WN531AX2 firmware versions prior to 2023526. It enables an administrator-authenticated context to upload arbitrary files and execute OS commands with root privileges, due to a file-upload vulnerability. The issue is doc...
CVE-2023-32612
Summary (CVE-2023-32612) WAVLINK WL-WN531AX2 firmware versions prior to 2023526 are affected by a client-side enforcement of a server-side security issue (CWE-602) that could allow a logged-in administrator to execute OS commands with root privileges. Impact: root-level command execution by privi...
CVE-2023-36143
Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...
Command injection
Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...
CVE-2023-36143
Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...
CVE-2023-36143
Maxprint Maxlink 1200G v3.4.11E has an OS command injection vulnerability in the "Diagnostic tool" functionality of the device...
CVE-2023-36143
The CVE-2023-36143 entry affects Maxprint Maxlink 1200G, version 3.4.11E, which exposes an OS command injection vulnerability in the device’s Diagnostic tool. The issue is caused by the ability to inject commands via the tool, allowing an attacker to execute arbitrary commands with low privileges...
CVE-2022-44720
An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot...
Command injection
An issue was discovered in Weblib Ucopia before 6.0.13. OS Command Injection injection can occur, related to chroot...
CVE-2023-26613
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...
CVE-2023-26613
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...
Command injection
An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operating system commands via a crafted GET request to EXCUSHELL...
CVE-2023-26613
The CVE-2023-26613 case affects D-Link DIR-823G (firmware 1.02B05). A command-injection flaw exists in the EXCU_SHELL endpoint that allows an unauthenticated attacker to execute OS commands via a crafted GET request, resulting in remote code execution. Multiple sources confirm the firmware and en...