The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-39148

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

The vulnerability of the sub_402414() function in TOTOLINK A720R router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the sub402414 function in TOTOLINK A720R router microprogramming systems is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker, operating remotely, to execute arbitrary commands...

The vulnerability of the sub_432F60 function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of the sub432F60 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_40BFA4() function in TOTOLINK A720R router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the sub40BFA4 function in TOTOLINK A720R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of the display.php script in the phpPgAdmin web administration tool for PostgreSQL allows a hacker to execute arbitrary commands.

The vulnerability of the display.php script in the phpPgAdmin web administration tool for PostgreSQL databases is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability of the dataexport.php web tool of the PostgreSQL administration PHP script phpPgAdmin allows a perpetrator to execute arbitrary commands.

The vulnerability of the dataexport.php web tool of the phpPgAdmin administration tool for PostgreSQL lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

The vulnerability in the web interface of the D-Link DIR-1260 router’s microprogramming software allows a hacker to execute arbitrary commands with root privileges.

The vulnerability in the web interface of the D-Link DIR-1260 router operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the SetDest/Dest/Target parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetDynamicDNSSettings function in D-link DIR-878A1 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_433188 function in D-Link DIR-882 wireless router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the sub433188 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_4438A4() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the sub_4621DC function in the usb_paswd.asp file of the jhttpd component of D-Link routers such as DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003, and DI-8003G allows a hacker to execute arbitrary commands.

The vulnerability of the sub4621DC function in the usbpaswd.asp file of the jhttpd component of D-Link routers such as DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003, and DI-8003G is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an...

The vulnerability of the /var/system/linux_vlan_reinit file in the microprogramming software for D-link DIR-823G routers allows a hacker to execute arbitrary commands.

The vulnerability of the /var/system/linuxvlanreinit file in the microprogramming-based routing software of D-link DIR-823G routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-39148: Improper Control of Generation of Code

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

Improper Access Control

flowise is vulnerable to improper access control.The vulnerability is due to insufficient file path restrictions in the WriteFileTool and ReadFileTool, which allows an attacker to read or write arbitrary files and potentially achieve remote command execution...

The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router, related to the lack of measures for cleaning input data, allows a hacker to execute arbitrary commands.

The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-64127

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely...

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones lies in the lack of measures to neutralize the special elements used in the operating system’s commands, allowing intruders to execute arbitrary commands.

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the httpd-demon (/goform/SetIpMacBind) of the Tenda AC21 router software allows a attacker to execute arbitrary commands or cause service interruptions.

The vulnerability of the httpd-demon /goform/SetIpMacBind of the Tenda AC21 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

📄 Cisco ISE API 3.0 Command Injection

Proof of concept exploit for a command injection vulnerability in Cisco ISE API version 3.0. ============================================================================================================================================= | Title : Cisco ISE API 3.0 command injection Exploits | |...