SUSE CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

EUVD-2025-202741

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

CVE-2025-56091

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

CVE-2025-56083

OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V109241521 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrnetworkIdmerge.lua...

Ruijie X60 PRO 安全漏洞

Ruijie X60 PRO is a home wireless router from China Ruijie Ruijie. A security vulnerability exists in Ruijie X60 PRO X6010212014RG-X60 PRO version V1.00V2.00, which originates from improper handling of a specially crafted POST request for moduleset in the file /usr/local/lua/devsta/nbrcwmp.lua,...

CVE-2025-56083

The Ruijie X30-PRO (version X30-PRO-V1 09241521 ) is vulnerable to an OS Command Injection (CWE-78) vulnerability. The flaw exists because the module_set function in the file /usr/local/lua/dev_sta/nbr_networkId_merge.lua fails to properly neutralize input, allowing an attacker to execute arbitra...

CVE-2025-56085

The Ruijie RG-EW1200 wireless router, specifically versions EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 , is susceptible to an OS Command Injection vulnerability. The root cause is unverified input handled by the module_set function in the file /usr/local/lua/dev_config/config_retain.lua. An ...

CVE-2025-56089

The Ruijie M18 WiFi router is vulnerable to an OS Command Injection vulnerability in firmware version EW_3.0(1)B11P226_M18_10223116 . The root cause is an unvalidated input to the module_set function located in the file /usr/local/lua/dev_sta/nbr_cwmp.lua. An attacker can exploit this by sending ...

CVE-2025-56106

The Ruijie RG-EW1800GX wireless router (version B11P226_EW1800GX_10223121 ) is susceptible to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request sent to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. Suc...

CVE-2025-56084

The Ruijie RG-EW1800GX PRO (specifically version B11P226_EW1800GX-PRO_10223117 ) is susceptible to an OS Command Injection vulnerability. The flaw stems from unverified input provided to the module_set function within the file /usr/local/lua/dev_sta/nbr_cwmp.lua. An attacker can exploit this by s...

CVE-2025-56090

The Ruijie RG-EW1200G PRO wireless router (versions V1.00/V2.00/V3.00/V4.00 ) is vulnerable to an OS Command Injection vulnerability. The root cause is unverified input to the module_set function within the /usr/local/lua/dev_config/config_retain.lua file. An attacker can exploit this by sending ...

CVE-2025-56091

The Ruijie RG-EW1800GX wireless router, specifically version B11P226_EW1800GX_10223121 , is vulnerable to an OS Command Injection vulnerability. The root cause is an unvalidated input to the module_set function within the file /usr/local/lua/dev_config/config_retain.lua. An attacker can exploit t...

CVE-2025-56097

The Ruijie RG-EW1800GX PRO wireless router is vulnerable to an OS Command Injection vulnerability in version B11P226_EW1800GX-PRO_10223117 . The root cause is unvalidated input to the module_set function within the file /usr/local/lua/dev_config/config_retain.lua. Attackers can exploit this by se...

CVE-2025-56111

The Ruijie RG-BCR RG-BCR860 cloud router is vulnerable to an OS Command Injection vulnerability. The root cause is the improper handling of a specially crafted POST request to the network_set_wan_conf function located in the file /usr/lib/lua/luci/controller/admin/netport.lua. This flaw allows an...

CVE-2025-56117

The Ruijie X30-PRO home wireless router (version X30-PRO-V1 09241521 ) is vulnerable to an OS Command Injection vulnerability. The flaw originates from the improper handling of a specially crafted POST request directed at the module_set parameter within the file /usr/local/lua/dev_sta/nbr_cwmp.lu...

CVE-2025-56090

OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

PT-2026-6171

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Linux kernel's LED class initialization. Specifically, LEDs were being added to the leds list before the led init core function was called, leaving a windo...

CVE-2025-56106

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devsta/nbrcwmp.lua...

CVE-2025-56114

OS Command Injection vulnerability in Ruijie M18 EW3.01B11P226M1810223116 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...

EUVD-2025-202740

OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleset in file /usr/local/lua/devconfig/configretain.lua...