CVE-2025-54405

Planet WGR-500 v1.3411b190912 has OS command injection in the formPingCmd functionality. Two parameters, ipaddr and counts, are used to build a shell command via system("ping -c 2>&1 > /tmp/pingResult &"), allowing arbitrary command execution when specially crafted HTTP requests are sent....

CVE-2025-54406

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command...

CVE-2025-54406

Planet WGR-500 v1.3411b190912 contains OS command injection flaws in the web server’s formPingCmd function. The vulnerability arises from unsafely using request parameters, notably counts , to compose a shell command (ping -c ) which is then executed via system(). Talos confirms multiple vulnera...

CVE-2025-54406

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command...

EUVD-2025-32857

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command...

CVE-2025-54405

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command...

EUVD-2014-6914

Malware in sbrugna...

EUVD-2014-2078

Malware in sbrugna...

EUVD-2009-2925

Malware in sbrugna...

EUVD-2014-2077

Malware in sbrugna...

EUVD-2007-4460

Malware in sbrugna...

EUVD-2014-4519

Malware in sbrugna...

EUVD-2015-1139

Malware in sbrugna...

EUVD-2014-7334

Malware in sbrugna...

Planet WGR-500 安全漏洞

The Planet WGR-500 is a WiFi router from Planet Corporation of Taiwan, China. A security vulnerability exists in the Planet WGR-500 v1.3411b190912 version, which stems from a stack buffer overflow in the counts request parameter in the formPingCmd function, which could lead to the execution of...

Planet WGR-500 安全漏洞

The Planet WGR-500 is a WiFi router from Planet in Taiwan, China. A security vulnerability exists in Planet WGR-500 v1.3411b190912, which stems from improper manipulation of the newpassword request parameter, which could lead to arbitrary command execution...

Planet WGR-500 安全漏洞

The Planet WGR-500 is a WiFi router from Planet in Taiwan, China. A security vulnerability exists in Planet WGR-500 v1.3411b190912, which stems from a stack buffer overflow in the submit-url request parameter and could lead to the execution of arbitrary code...

PT-2025-40997

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description A format string vulnerability exists in the formPingCmd functionality. A series of specially crafted HTTP requests can lead to memory corruption. An attacker can trigger this by sending a series...

Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2025-2226 Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities October 7, 2025 CVE Number CVE-2025-54401,CVE-2025-54400,CVE-2025-54399,CVE-2025-54402 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd...

PT-2025-41007

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Several OS command injection flaws are present in the formPingCmd functionality. An attacker can execute arbitrary commands by sending a crafted series of HTTP requests. The counts request...