NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as CBR40, CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, RBS40V, and RBW30, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

Router Input Cleaning Command Execution

The vulnerability of the built-in software for routers such as CBR40, CBR750, EAX20, EAX80, EX7500, LAX20, MK62, MR60, MS60, R6400, R6400v2, R6700v3, R6900P, R7000, R7000P, R7850, R7900, R7900P, R7960P, R8000, R8000P, RAX15, RAX20, RAX200, RAX35v2, RAX40v2, RAX43, RAX45, RAX50, RAX75, RAX80,...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR CBR40, CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ built-in software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR CBR40, CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ built-in software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D700D7000v2, LAX20, MK62, MR60, MS60, RAX15, RAX20, RAX200, RAX45, RAX50, RAX43, RAX40v2, RAX35v2, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and XR1000 lies in insufficient cleaning of input data...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR40, CBR750, D7000v2, LAX20, MK62, MR60, MS60, MR80, MS80, RAX15, RAX20, RAX200, RAX45, RAX50, RAX43, RAX40v2, RAX35v2, RAX75, RAX80, RBK752, RBR750, RBS750, RBK852, RBR850, RBS850, and XR1000 is related to insufficient...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ built-in software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Integrated Router Command Injection

The vulnerability of NETGEAR’s integrated routing software for models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

Backdoor.Win32.Hanuman.b Code Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/4087cffab90fa22c2882e2f97a467e8e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hanuman.b Vulnerability: Unauthenticated Remote Command Execution Description: The...

CVE-2021-43928

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2021-43925

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log Management functionality in Synology DiskStation Manager DSM before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors...

Backdoor.Win32.Wisell Remote Command Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/57bda78cc5fd6a06017148bae28e8e39.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wisell Vulnerability: Unauthenticated Remote Command Execution Description: The malwa...

CVE-2021-33965

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/setZRMesh which receives parameters by POST request, and the parameter meshenable and meshdevice have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...

CVE-2021-33964

China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/setfirewalllevel which receives parameters by POST request, and the parameter firewalllevel has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands...