CVE-2023-27514

Summary: CVE-2023-27514 affects Contec SolarView Compact SV-CPT-MC310 and SV-CPT-MC310F. The flaw is an OS command injection in the download page , allowing a remote authenticated attacker to execute arbitrary commands on vulnerable devices. The affected firmware versions are SV-CPT-MC310 and SV-...

PT-2023-21185 · Unknown · Solarview Compact Sv-Cpt-Mc310

Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 SolarView Compact SV-CPT-MC310F versions prior to Ver.8.10 Description: The issue allows a remote authenticated attacker to execute an arbitrary OS command due to an OS command injecti...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

CVE-2023-32350

CVE-2023-32350 affects Teltonika RUT router firmware versions 00.07.00–00.07.03. The vulnerability is an OS command injection in a Lua service where an attacker could replace a user-provided package name with a malicious one to inject commands. The provided documents do not specify a fixed versio...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

CVE-2023-32350

Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a user-provided package name by instead providing a package with a...

PT-2023-23744 · Teltonika · Teltonika Rut

Name of the Vulnerable Software and Affected Versions: Teltonika RUT router firmware versions 00.07.00 through 00.07.03 Description: The issue is an operating system OS command injection vulnerability in a Lua service. An attacker could exploit a parameter in the vulnerable function that calls a...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 CVE-2022-46169 is a security vulnerability fou...

OS command injection vulnerability in Inaba Denki Sangyo Wi-Fi AP UNIT

Overview Wi-Fi AP UNIT provided by Inaba Denki Sangyo Co., Ltd. contains an OS command injection vulnerability CWE-78. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An arbitrary OS command may be executed by an authenticat...

CVE-2023-32955

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...

CVE-2023-32956

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2023-32956

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2023-32955

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...

Command injection

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2023-32956

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2023-32956

CVE-2023-32956 affects Synology Router Manager (SRM) via an OS command injection vulnerability in the CGI component. Impact is remote arbitrary code execution with high severity (CVSSv3.1: 9.8, network vector, no user interaction, privileges: none; confidentiality, integrity, availability all hig...

CVE-2023-32955

Synology SRM is affected by CVE-2023-32955 due to an OS command injection in the DHCP Client functionality. The root cause is improper neutralization of special elements used in a system call, allowing network-adjacent attackers to execute arbitrary commands. Documents from ZDI state exploitation...

CVE-2023-32955

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...

CVE-2023-32955

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...

CVE-2020-13378

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code...