D-Link DIR-882 Subroutine Arbitrary Command Execution

The vulnerability of the sub433188 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-882 Sub Process Command Execution

The vulnerability of the sub432F60 function in D-Link DIR-882 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-882 Sub Process Command Execution

The vulnerability of sub4438A4 in D-Link DIR-882 wireless router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A720R Router Sub 40BFA4 Function Command Execution

The vulnerability of the sub40BFA4 function in TOTOLINK A720R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

jhttpd Sub_4621DC Arbitrary Command Execution

The vulnerability of the sub4621DC function in the usbpaswd.asp file of the jhttpd component of D-Link routers such as DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003, and DI-8003G is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an...

D-link DIR-823G Router Command Execution

The vulnerability of the /var/system/linuxvlanreinit file in the microprogramming-based routing software of D-link DIR-823G routers is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A720R Router Sub 402414 Function Command Execution

The vulnerability of the sub402414 function in TOTOLINK A720R router microprogramming systems is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker, operating remotely, to execute arbitrary commands...

phpPgAdmin Display Command Execution

The vulnerability of the display.php script in the phpPgAdmin web administration tool for PostgreSQL databases is related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

📄 LG Simple Editor 3.21.0 Remote Command Injection

LG Simple Editor version 3.21.0 proof of concept remote command injection exploit. ============================================================================================================================================= | Title : LG Simple Editor 3.21.0 PHP Code Injection Vulnerability | |...

CVE-2024-39148: Improper Control of Generation of Code

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

PT-2025-48400

Name of the Vulnerable Software and Affected Versions ADSLR B-QE2W401 version 250814-r037c Description A command injection issue exists in ADSLR B-QE2W401 250814-r037c. Manipulation of the del swifimac parameter within the /send order.cgi file can lead to command execution. This attack can be...

phpPgAdmin Data Export Command Execution

The vulnerability of the dataexport.php web tool of the phpPgAdmin administration tool for PostgreSQL lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

D-Link DIR-1260 Router Arbitrary Command Execution

The vulnerability in the web interface of the D-Link DIR-1260 router operating system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the SetDest/Dest/Target parameter. Exploiting this vulnerability allows a remote...

PT-2025-48403

Name of the Vulnerable Software and Affected Versions ADSLR NBR1005GPEV2 version 250814-r037c Description A flaw exists in ADSLR NBR1005GPEV2 250814-r037c that allows for remote command injection. The issue is located within the ap macfilter del function of the /send order.cgi file. Manipulation ...

PT-2025-48401

Name of the Vulnerable Software and Affected Versions ADSLR NBR1005GPEV2 version 250814-r037c Description A flaw exists in ADSLR NBR1005GPEV2 250814-r037c. The issue is related to the ap macfilter add function within the /send order.cgi file. Manipulation of the mac argument can result in command...

Improper Access Control

flowise is vulnerable to improper access control.The vulnerability is due to insufficient file path restrictions in the WriteFileTool and ReadFileTool, which allows an attacker to read or write arbitrary files and potentially achieve remote command execution...

EDIMAX BR-6478AC Arbitrary Command Execution

The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-64127

An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely...

Zenitel TCIV-3+ IP video door phones Command Injection

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

httpd-demon Arbitrary Command Execution

The vulnerability of the httpd-demon /goform/SetSysTimeCfg in the Tenda AC21 router microprogramming system is related to the operation of writing data beyond the buffer in memory when processing parameters for time and timeZone. Exploiting this vulnerability allows a remote attacker to execute...