Lucene search
+L

20055 matches found

Packet Storm
Packet Storm
added 2026/04/10 12:0 a.m.105 views

📄 Horilla 1.3 Remote Command Execution

Horilla versions 1.3 and below suffer from a remote command execution vulnerability. Exploit Title: Horilla v1.3 - RCE Date: 2025-05-29 Exploit Author: Raghad Abdallah Al-syouf Version: = 1.3 Tested on: Ubuntu / Docker CVE: CVE-2025-48868 Description: This script exploits the authenticated RCE...

7.2CVSS6AI score0.02327EPSS
SaveExploits3
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.12 views

PT-2026-31884

Name of the Vulnerable Software and Affected Versions Totolink A7100RU version 7.4cu.2313 b20191024 Description A weakness exists in the Totolink A7100RU router. The issue affects the setUrlFilterRules function within the /cgi-bin/cstecgi.cgi file of the CGI Handler component. Manipulation of the...

10CVSS7.2AI score0.02499EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/04/09 9:31 p.m.7 views

EUVD-2026-21185

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command injection. The attack can be initiated remotely. Th...

10CVSS6.9AI score0.01766EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/09 9:31 p.m.7 views

EUVD-2026-21184

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wifiOff can lead to os command injection. It is possible to launch the attack...

10CVSS7AI score0.02114EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/09 9:31 p.m.9 views

EUVD-2026-21076

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sambaEnabled results in os command injection. It is possible to initiate th...

10CVSS7AI score0.01803EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/09 9:31 p.m.10 views

EUVD-2026-21074

A vulnerability was identified in Totolink A7100RU 7.4cu.2313b20191024. The impacted element is the function setDmzCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument wanIdx leads to os command injection. The attack may be performed from remote. Th...

10CVSS7AI score0.01803EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/04/09 9:31 p.m.15 views

FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command

A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.runcommand in the library metagpt/tools/libs/terminal.py. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed ...

9.8CVSS6.4AI score0.02328EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2026/04/09 9:31 p.m.6 views

GHSA-WP29-QMVJ-FRVP FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command

A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.runcommand in the library metagpt/tools/libs/terminal.py. The manipulation leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed ...

7.3CVSS5.2AI score0.02328EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2026/04/09 9:31 p.m.11 views

FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the...

9.8CVSS6.9AI score0.02241EPSS
SaveExploits1References8Affected Software1
EUVD
EUVD
added 2026/04/09 9:31 p.m.7 views

EUVD-2026-21016

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the stun-pass parameter to /cgi-bin/cstecgi.cgi...

6.1AI score0.00573EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/09 9:16 p.m.6 views

CVE-2026-5977

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wifiOff can lead to os command injection. It is possible to launch the attack...

10CVSS0.02114EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/09 9:16 p.m.12 views

CVE-2026-5978

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command injection. The attack can be initiated remotely. Th...

10CVSS0.01766EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/09 8:30 p.m.4 views

CVE-2026-5978

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command injection. The attack can be initiated remotely. Th...

10CVSS6.9AI score0.01766EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/09 8:30 p.m.39 views

CVE-2026-5978 Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection

A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument mode leads to os command injection. The attack can be initiated remotely. Th...

10CVSS0.01766EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/09 8:16 p.m.10 views

CVE-2026-5973

A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function getmimetype of the file metagpt/utils/common.py. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The project was...

9.8CVSS0.02283EPSS
SaveExploits1References6
NVD
NVD
added 2026/04/09 8:16 p.m.13 views

CVE-2026-5974

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/libs/terminal.py. This manipulation causes os command injection. The attack is possible to be carried out remotely. The project was informed of the...

9.8CVSS0.02241EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2026/04/09 8:15 p.m.2 views

CVE-2026-5977

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wifiOff can lead to os command injection. It is possible to launch the attack...

10CVSS7AI score0.02114EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/04/09 8:15 p.m.35 views

CVE-2026-5977 Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument wifiOff can lead to os command injection. It is possible to launch the attack...

10CVSS0.02114EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/04/09 8:0 p.m.4 views

CVE-2026-5976 Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sambaEnabled results in os command injection. It is possible to initiate th...

10CVSS5.6AI score0.01803EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/09 8:0 p.m.5 views

CVE-2026-5976

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sambaEnabled results in os command injection. It is possible to initiate th...

10CVSS7AI score0.01803EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder