CVE-2025-11005: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an OS command injection vulnerability that stems from a failure to properly filter special...

PT-2025-39310

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1360 B20241207 Description A flaw exists in TOTOLINK X6000R that allows for OS Command Injection. This occurs due to improper neutralization of special elements used in an OS command. An attacker could...

CVE-2025-52906: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

CVE-2025-56819: Improper Neutralization of Special Elements used in an OS Command

An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...

CVE-2025-57636

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...

CVE-2025-9588

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection. This issue affects enVision: before 250563...

CVE-2025-9588 OS Command Injection in Iron Mountain's enVision

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection. This issue affects enVision: before 250563...

CVE-2025-9588 OS Command Injection in Iron Mountain's enVision

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection. This issue affects enVision: before 250563...

CVE-2025-9494 Viessmann Vitogate 300 OS Command Injection

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the /cgi-bin/vitogate.cgi endpoint is affected, when the form JSON parameter is set to form-0-2. The vulnerability stems fro...

CVE-2025-57636: Improper Neutralization of Special Elements used in an OS Command

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...

CVE-2025-9588: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection. This issue affects enVision: before 250563...

CVE-2025-57639: Improper Neutralization of Special Elements used in an OS Command

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf function of the httpd file...

CVE-2025-9494: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the /cgi-bin/vitogate.cgi endpoint is affected, when the form JSON parameter is set to form-0-2. The vulnerability stems fro...

CVE-2025-10775

The CVE-2025-10775 entry concerns Wavlink WL-NU516U1 (firmware 240425). The vulnerability exists in the login.cgi function sub_4012A0 where improper handling of the ipaddr parameter enables remote OS command injection. Exploitation is feasible over the network, and public exploit disclosures exis...

CVE-2025-10774 Ruijie 6000-E10 sub_commit.php os command injection

A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117. This affects an unknown part of the file /view/vpn/autovpn/subcommit.php. This manipulation of the argument key causes os command injection. It is possible to initiate the attack remotely. The exploit has been made availabl...

CVE-2025-10775: Improper Neutralization of Special Elements used in an OS Command

A security vulnerability has been detected in Wavlink WL-NU516U1 240425. This vulnerability affects the function sub4012A0 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-10774: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in Ruijie 6000-E10 up to 2.4.3.6-20171117. This affects an unknown part of the file /view/vpn/autovpn/subcommit.php. This manipulation of the argument key causes os command injection. It is possible to initiate the attack remotely. The exploit has been made availabl...

CVE-2025-10767 CosmodiumCS OnlyRAT Configuration File main.py remote_download os command injection

A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remoteupload/remotedownload of the file main.py of the component Configuration File Handler. The manipulation of the argument configuration"PASSWORD" results in os command injection. The...

CVE-2025-10767: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in CosmodiumCS OnlyRAT up to 3.2. The affected element is the function connect/remoteupload/remotedownload of the file main.py of the component Configuration File Handler. The manipulation of the argument configuration"PASSWORD" results in os command injection. The...