19614 matches found
CVE-2026-120231
A vulnerability exists in the WAVLINK WN553X1-B V260403_2.0.0 device within the OpenVPN CLI Handler component. Specifically, the function sub_416568 in the file /bin/ioos fails to properly neutralize the file_id argument, leading to OS command injection . This vulnerability can be exploited remot...
CVE-2026-120231 WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection
A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. The affected element is the function sub416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument fileid causes os command injection. It is possible to initiate the attack remotely. The...
CVE-2026-120229
A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This issue affects the function sub416B50 of the file /bin/ioos. The manipulation of the argument fileid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public...
CVE-2026-120228
A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The...
CVE-2026-120230
The WAVLINK WN701AE (version 260105) is susceptible to an OS command injection vulnerability within the ioos Web Backend component. Specifically, the del_vlan_group function fails to properly sanitize the vlan_name argument, allowing an attacker to execute arbitrary system commands. This attack c...
EUVD-2026-114852
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function delvlangroup of the component ioos Web Backend. The manipulation of the argument vlanname results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The...
CVE-2026-120230 WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function delvlangroup of the component ioos Web Backend. The manipulation of the argument vlanname results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The...
CVE-2026-120229
A vulnerability exists in WAVLINK WN553X1-B firmware version 260403_2.0.0 . The issue resides in the sub_416B50 function of the /bin/ioos file, where improper neutralization of the file_id argument allows for OS command injection . This vulnerability can be exploited remotely , and public exploit...
CVE-2026-120229 WAVLINK WN553X1-B ioos sub_416B50 os command injection
A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This issue affects the function sub416B50 of the file /bin/ioos. The manipulation of the argument fileid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public...
EUVD-2026-114851
A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This issue affects the function sub416B50 of the file /bin/ioos. The manipulation of the argument fileid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public...
EUVD-2026-114848
A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The...
CVE-2026-120228
A flaw in the ioos Service of the WAVLINK WN553X1-B V260403_2.0.0 firmware enables remote os command injection . The vulnerability exists within the sub_416D88 function of the /bin/ioos file, where improper neutralization of the group_id/group_name arguments allows for arbitrary command execution...
CVE-2026-120228 WAVLINK WN553X1-B ioos Service sub_416D88 os command injection
A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The...
CVE-2021-27928
Information Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep patch through...
CVE-2026-120227
A vulnerability was detected in WAVLINK WN701AE M01AEV260105. This affects the function delstaticrule of the file staticroutesetting.sh of the component ioos Web Backend. Performing a manipulation of the argument rulename results in os command injection. Remote exploitation of the attack is...
CVE-2024-3400
CVE-2024-3400 CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect The Pan-OS Checker is to determine the Palo Alto PAN-OS software version of a remote GlobalProtect portal or management interface. Before run the script, need to make sure version-table.txt in the same...
CVE-2026-120227
The WAVLINK WN701AE M01AE_V260105 is vulnerable to an OS command injection in the ioos Web Backend component. Specifically, the del_staticrule function within the static_route_setting.sh file fails to properly sanitize the rule_name argument, allowing an attacker to execute arbitrary commands. Re...
CVE-2026-120227 WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection
A vulnerability was detected in WAVLINK WN701AE M01AEV260105. This affects the function delstaticrule of the file staticroutesetting.sh of the component ioos Web Backend. Performing a manipulation of the argument rulename results in os command injection. Remote exploitation of the attack is...
EUVD-2026-114839
A vulnerability was detected in WAVLINK WN701AE M01AEV260105. This affects the function delstaticrule of the file staticroutesetting.sh of the component ioos Web Backend. Performing a manipulation of the argument rulename results in os command injection. Remote exploitation of the attack is...