The vulnerability of the sub_4438A4() function in D-Link DIR-882 wireless router software allows a hacker to execute arbitrary commands.

The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the /var/system/linux_vlan_reinit file in the microprogramming software for D-link DIR-823G routers allows a hacker to execute arbitrary commands.

The vulnerability of the /var/system/linuxvlanreinit file in the microprogramming-based routing software of D-link DIR-823G routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-39148: Improper Control of Generation of Code

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

Improper Access Control

flowise is vulnerable to improper access control.The vulnerability is due to insufficient file path restrictions in the WriteFileTool and ReadFileTool, which allows an attacker to read or write arbitrary files and potentially achieve remote command execution...

The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router, related to the lack of measures for cleaning input data, allows a hacker to execute arbitrary commands.

The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-64127

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely...

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones lies in the lack of measures to neutralize the special elements used in the operating system’s commands, allowing intruders to execute arbitrary commands.

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the httpd-demon (/goform/SetIpMacBind) of the Tenda AC21 router software allows a attacker to execute arbitrary commands or cause service interruptions.

The vulnerability of the httpd-demon /goform/SetIpMacBind of the Tenda AC21 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

📄 Cisco ISE API 3.0 Command Injection

Proof of concept exploit for a command injection vulnerability in Cisco ISE API version 3.0. ============================================================================================================================================= | Title : Cisco ISE API 3.0 command injection Exploits | |...

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones lies in the lack of measures to neutralize the special elements used in the operating system’s commands, allowing intruders to execute arbitrary commands.

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the httpd-demon (/goform/SetSysTimeCfg) in the microprogramming software for Tenda AC21 allows a perpetrator to execute arbitrary commands or cause service interruptions.

The vulnerability of the httpd-demon /goform/SetSysTimeCfg in the Tenda AC21 router microprogramming system is related to the operation of writing data beyond the buffer in memory when processing parameters for time and timeZone. Exploiting this vulnerability allows a remote attacker to execute...

Remote Command Execution

scio-pypi is vulnerable to Remote Command Execution. The vulnerability is due to torch.load executing unsafe deserialization even when weightsonly=True, which allows an attacker to craft malicious model files that trigger arbitrary code execution during loading...

Remote Command Execution

n8n and n8n-nodes-base are vulnerable to Remote Command Execution. The vulnerability is due to the Execute Command node allowing arbitrary command execution on the host system, which allows an attacker to exploit insufficient user trust controls to run malicious commands leading to system...

The vulnerability of the SetNetworkSettings() function in the prog.cgi script of the D-link DIR-878A1 router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the SetNetworkSettings function in the prog.cgi script of the D-link DIR-878A1 router’s microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary comman...

The vulnerability of the SetDMZSettings() function in the prog.cgi script of the D-link DIR-878A1 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the SetDMZSettings function in the prog.cgi script of the D-link DIR-878A1 router microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the NIM server for the IBM AIX and IBM VIOS operating systems allows attackers to execute arbitrary commands.

The vulnerability of the NIM server for the IBM AIX and IBM VIOS operating systems is related to improper process management. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-64127: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely...

CLSA-2025-1764080949 pcp: Fix of CVE-2024-3019

CVE-2024-3019: Fix default pmproxy configuration to restrict access to Redis server backend, preventing remote command execution...

The vulnerability of the `saveParentControlInfo` function in the Tenda AC23 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the saveParentControlInfo function in the Tenda AC23 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the operating system for end devices based on Linux IGEL OS, related to the failure to take measures to neutralize special elements used in the operating system’s commands, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Linux-based IGEL OS for end devices is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...