Lucene search
K

3861 matches found

RedhatCVE
RedhatCVE
added 2025/08/11 12:33 p.m.12 views

CVE-2025-8752

A vulnerability was found in wangzhixuan spring-shiro-training up to 94812c1fd8f7fe796c931f4984ff1aa0671ab562. It has been declared as critical. This vulnerability affects unknown code of the file /role/add. The manipulation leads to command injection. The attack can be initiated remotely. The...

9.8CVSS7.9AI score0.04804EPSS
Exploits1References1
NVD
NVD
added 2025/08/11 5:15 a.m.10 views

CVE-2025-8830

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function sub3517C of the file /goform/setWan. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The...

8.8CVSS0.08257EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/08/11 4:32 a.m.2 views

CVE-2025-8830 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan sub_3517C os command injection

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function sub3517C of the file /goform/setWan. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The...

6.5CVSS7.5AI score0.08257EPSS
Exploits1References6
CVE
CVE
added 2025/08/11 4:32 a.m.30 views

CVE-2025-8830

The CVE-2025-8830 issue affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 devices up to 20250801. It centers on the function sub_3517C in /goform/setWan, where manipulating the Hostname argument leads to an OS command injection. The vulnerability can be triggered remotely and has had publ...

8.8CVSS7.5AI score0.08257EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2025/08/11 4:15 a.m.4 views

CVE-2025-8829

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function umred of the file /goform/RPsetBasicAuto. The manipulation of the argument hname leads to os command injection. The attack can be launched...

8.8CVSS0.08257EPSS
Exploits1References6
OSV
OSV
added 2025/08/11 4:15 a.m.4 views

CVE-2025-8829

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function umred of the file /goform/RPsetBasicAuto. The manipulation of the argument hname leads to os command injection. The attack can be launched...

8.8CVSS5.5AI score0.08257EPSS
Exploits1References6
NVD
NVD
added 2025/08/11 4:15 a.m.4 views

CVE-2025-8828

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function ipv6cmd of the file /goform/setIpv6. The manipulation of the argument...

8.8CVSS0.08257EPSS
Exploits1References6
OSV
OSV
added 2025/08/11 4:15 a.m.4 views

CVE-2025-8828

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function ipv6cmd of the file /goform/setIpv6. The manipulation of the argument...

8.8CVSS5.5AI score0.08257EPSS
Exploits1References6
NVD
NVD
added 2025/08/11 4:15 a.m.10 views

CVE-2025-8827

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This issue affects the function uminspectcrossband of the file /goform/RPsetBasicAuto. The manipulation of the argument staticGateway leads to os command injection. The attack may be initiated...

8.8CVSS0.08257EPSS
Exploits1References6
OSV
OSV
added 2025/08/11 4:15 a.m.3 views

CVE-2025-8827

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This issue affects the function uminspectcrossband of the file /goform/RPsetBasicAuto. The manipulation of the argument staticGateway leads to os command injection. The attack may be initiated...

8.8CVSS5.5AI score0.08257EPSS
Exploits1References6
CVE
CVE
added 2025/08/11 4:2 a.m.23 views

CVE-2025-8829

CVE-2025-8829 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. The vulnerability is in the um_red function of the file /goform/RP_setBasicAuto; manipulation of the hname parameter leads to OS command injection. The attack can be launched remotely, and public discl...

8.8CVSS7.5AI score0.08257EPSS
In wildExploits1References6Affected Software1
Cvelist
Cvelist
added 2025/08/11 4:2 a.m.11 views

CVE-2025-8829 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injection

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function umred of the file /goform/RPsetBasicAuto. The manipulation of the argument hname leads to os command injection. The attack can be launched...

6.5CVSS0.08257EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/08/11 4:2 a.m.2 views

CVE-2025-8829 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injection

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function umred of the file /goform/RPsetBasicAuto. The manipulation of the argument hname leads to os command injection. The attack can be launched...

6.5CVSS7.5AI score0.08257EPSS
Exploits1References6
CVE
CVE
added 2025/08/11 3:32 a.m.22 views

CVE-2025-8828

The CVE-2025-8828 entry affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 device families. The root cause is manipulation of arguments to the ipv6cmd function in /goform/setIpv6, which leads to OS command injection. A remote attacker can trigger the vulnerability without user interaction,...

8.8CVSS7.5AI score0.08257EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2025/08/11 3:32 a.m.11 views

CVE-2025-8828 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 ipv6cmd os command injection

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function ipv6cmd of the file /goform/setIpv6. The manipulation of the argument...

6.5CVSS0.08257EPSS
Exploits1References6
NVD
NVD
added 2025/08/11 3:15 a.m.5 views

CVE-2025-8825

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function RPsetBasicAuto of the file /goform/RPsetBasicAuto. The manipulation of the argument staticIp/staticNetmask leads to os command injection. It is possible to initiat...

8.8CVSS0.08257EPSS
Exploits1References6
OSV
OSV
added 2025/08/11 3:15 a.m.3 views

CVE-2025-8825

A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function RPsetBasicAuto of the file /goform/RPsetBasicAuto. The manipulation of the argument staticIp/staticNetmask leads to os command injection. It is possible to initiat...

8.8CVSS5.5AI score0.08257EPSS
Exploits1References6
CVE
CVE
added 2025/08/11 3:2 a.m.36 views

CVE-2025-8827

CVE-2025-8827 affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000. Root cause: a flaw in the function um_inspect_cross_band in the file /goform/RP_setBasicAuto where manipulating the staticGateway argument leads to OS command injection. The vulnerability can be exploited remotely; the explo...

8.8CVSS7.6AI score0.08257EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2025/08/11 2:15 a.m.6 views

CVE-2025-8823

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setDeviceName of the file /goform/setDeviceName. The manipulation of the argument DeviceName leads to os command injection. The attack can be...

8.8CVSS0.08257EPSS
Exploits1References6
OSV
OSV
added 2025/08/11 2:15 a.m.4 views

CVE-2025-8823

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this vulnerability is the function setDeviceName of the file /goform/setDeviceName. The manipulation of the argument DeviceName leads to os command injection. The attack can be...

8.8CVSS5.5AI score0.08257EPSS
Exploits1References6
Rows per page
Query Builder