18548 matches found
CVE-2025-44838
TOTOLINK CPE CP900 V6.3c.1144B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-44865
The Tenda W20E router, specifically version 15.11.0.6 , is susceptible to a command injection vulnerability within the formSetDebugCfg function. This flaw occurs because the enable parameter fails to properly filter special characters and commands, allowing an attacker to execute arbitrary comman...
CVE-2025-44835
D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell...
CVE-2025-44835: Improper Neutralization of Special Elements used in a Command
D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell...
PyTorch Remote Command Execution Vulnerability
PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on a system...
PT-2025-18920 · Red Hat · Red Hat
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a remote command execution in Red Hat Linux. However, Red Hat Product Security has concluded that this CVE is not needed, indicating a severity of 0.0 and NA...
TOTOLINK X5000R SetScheduleCfg Command Execution
The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by manipulating the week parameter...
TOTOLINK X5000R SetScheduleCfg Command Execution
The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by processing the recHour parameter...
TOTOLINK X5000R SetScheduleCfg Command Execution
The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by manipulating the hour parameter...
zyUtilMailSend Arbitrary Command Execution
The vulnerability of the zyUtilMailSend function in Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
TOTOLINK X5000R SetScheduleCfg Command Execution
The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by manipulating the switch parameter...
ZyEE Software Arbitrary Command Execution
The vulnerability of ZyEE software for Wi-Fi amplifiers, subscriber terminals, DSL/Ethernet CPE routers exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433Erlang-OTP This script is a custom security too...
Exploit for Path Traversal in Zoneminder
CVE-2022-29806 ZoneMinder up to 1.36.12 Language privilege esc...
Exploit for Path Traversal in Zoneminder
CVE-2022-29806 ZoneMinder up to 1.36.12 Language privilege esc...
CVE-2025-29659
Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the "cmdlisten" function located in the "cmd" binary...
CVE-2025-28039
TOTOLINK EX1200T V4.1.2cu.5232B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter...
CVE-2025-28035
TOTOLINK A830R V4.1.2cu.5182B20201102 was found to contain a pre-auth remote command execution vulnerability in the setNoticeCfg function through the NoticeUrl parameter...
CVE-2025-28037
TOTOLINK A810R V4.1.2cu.5182B20201026 and A950RG V4.1.2cu.5161B20200903 were found to contain a pre-auth remote command execution vulnerability in the setDiagnosisCfg function through the ipDomain parameter...