9973 matches found
CVE-2025-2094
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...
CVE-2025-2096 TOTOLINK EX1800T cstecgi.cgi setRebootScheCfg os command injection
A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiat...
CVE-2025-2096
CVE-2025-2096 affects TOTOLINK EX1800T (firmware 9.1.0cu.2112_B20220316). The vulnerability exists in the function setRebootScheCfg of /cgi-bin/cstecgi.cgi, where manipulating arguments mode/week/minute/recHour leads to OS command injection. The issue can be triggered remotely and the exploit has...
CVE-2025-2095 TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection
A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-2095
This CVE concerns TOTOLINK EX1800T 9.1.0cu.2112_B20220316. The vulnerability is in the function setDmzCfg of /cgi-bin/cstecgi.cgi, where manipulating the ip parameter enables an OS command injection. It can be exploited remotely, and the exploit has been disclosed publicly. The issue stems from h...
CVE-2025-2095 TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection
A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-2094 TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...
CVE-2025-2094 TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection
A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...
Exploit for CVE-2025-26055
CVE-2025-26055 CVE Description Author : Rohan Deshpande...
CVE-2025-22447
Incorrect access permission of a specific service issue exists in RemoteView Agent for Windows versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege...
CVE-2025-22447
Incorrect access permission of a specific service issue exists in RemoteView Agent for Windows versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege...
CVE-2025-22447
CVE-2025-22447 affects RemoteView Agent (Windows) prior to version 8.1.5.2. The root cause is an incorrect access permission (CWE-276) on a specific service, enabling a non-administrative user on the remote PC to run arbitrary OS commands with LocalSystem privileges. The documented remediation is...
CVE-2025-24864
Incorrect access permission of a specific folder issue exists in RemoteView Agent for Windows versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege...
CVE-2025-24864
CVE-2025-24864 affects RemoteView Agent (Windows) prior to v8.1.5.2. Root cause: incorrect access permissions on a specific folder (CWE-276) allowing a non-administrative remote-access user to execute arbitrary OS commands with LocalSystem privileges. Impact: local user on a remote PC gains full ...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
Linux Distros Unpatched Vulnerability : CVE-2023-1350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function updatejobrun of the file src/update.c of the compone...
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...