CVE-2025-7388: Improper Neutralization of Special Elements used in a Command

It was possible to perform Remote Command Execution RCE via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration property...

Progress Software OpenEdge command injection vulnerability

Progress Software OpenEdge is a suite of integrated development environments IDEs from Progress Software, USA. A command injection vulnerability exists in Progress Software OpenEdge that stems from insufficient input validation of the Java RMI interface, which could lead to a remote command...

CVE-2025-9935 TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866B20220506. This vulnerability affects the function sub4159F8 of the file /webcste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed an...

CVE-2025-9935

The CVE-2025-9935 entry concerns TOTOLINK N600R version 4.3.0cu.7866_B20220506. The issue affects the function sub_4159F8 in /web_cste/cgi-bin/cstecgi.cgi, where manipulation can lead to a remote command injection. The exploit is publicly disclosed and may be utilized. Multiple connected sources ...

CVE-2025-9934 TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection

A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415B20250515. This affects the function sub410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and...

CVE-2025-9934

CVE-2025-9934 affects TOTOLINK X5000R 9.1.0cu.2415_B20250515. The vulnerability is in the function sub_410C34 of the file /cgi-bin/cstecgi.cgi, where manipulation of the pid argument can trigger a command injection. Remote exploitation is possible and the exploit has been made public. Multiple co...

CVE-2025-9752

A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgimain of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launched remotely. The exploit has been...

PT-2025-35850

Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2415 B20250515 Description: A command injection issue exists in the sub 410C34 function of the /cgi-bin/cstecgi.cgi file. Manipulation of the pid argument can lead to remote code execution. The exploit has been...

PT-2025-35851

Name of the Vulnerable Software and Affected Versions: TOTOLINK N600R version 4.3.0cu.7866 B20220506 Description: A vulnerability exists in the function sub 4159F8 of the file /web cste/cgi-bin/cstecgi.cgi that can lead to command injection. This issue can be exploited remotely. The exploit has...

Linux Distros Unpatched Vulnerability : CVE-2024-50636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyMOL 2.5.0 contains a vulnerability in its Run Script function, which allows the execution of arbitrary Python code embedded within .PYM files. Attackers can...

Totolink A3002R Command Injection

The vulnerability of the Totolink A3002R router’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOlink EX1800T SetWiFiExtenderConfig Command Execution

The vulnerability of the setWiFiExtenderConfig function in the TOTOlink EX1800T Wi-Fi extension software lies in the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability could allow a malicious actor to execute arbitra...

TOTOLINK Router Command Execution

The vulnerability of the setNoticeCfg function in the microprogramming software for TOTOLINK A800R, TOTOLINK A810R, TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers is related to the failure to take measures to neutralize special elements. Exploiting this vulnerabili...

D-Link service.cgi Command Execution

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 lies in the failure to eliminate special elements during the processing of the EVENT=CHECKFW parameter. Exploiting this vulnerability...

TP-Link VIGI NVR1104H-4P Network Video Recorder Command Injection

The vulnerability of TP-Link VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2 network video recorders lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TP-Link VIGI NVR1104H-4P Network Video Recorder Command Injection

The vulnerability of TP-Link VIGI NVR1104H-4P V1 and VIGI NVR2016H-16MP V2 network video recorders lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK X6000R Subroutine Arbitrary Command Execution

The vulnerability of sub4184C0 in the microprogramming software of TOTOLINK X6000R routers lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a specially created request...

TOTOLINK Router Command Execution

The vulnerability of the setNoticeCfg function in the microprogramming software for TOTOLINK A800R, TOTOLINK A810R, TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers is related to the failure to take measures to neutralize special elements. Exploiting this vulnerabili...

TOTOLINK Router Command Execution

The vulnerability of the setDiagnosisCfg function in the microprogramming software of TOTOLINK A800R, TOTOLINK A810R, TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers is related to the failure to take measures to neutralize special elements. Exploiting this...

Linux Distros Unpatched Vulnerability : CVE-2017-15041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Go before 1.8.4 and 1.9.x before 1.9.1 allows go get remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1...