PT-2021-18681

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the MLD PROXY WAN CONNECT parameter in the "api/ZRIGMP/set MLD PROXY" interface...

PT-2021-18678

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in certain parameters. Specifically, the "api/zrDm/set ZRElink" interface is vulnerable. The...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

Command injection

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

CVE-2021-27113

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

CVE-2021-27113

The CVE-2021-27113 entry concerns D-Link DIR-816 A2 devices (firmware 1.10 B05) where an HTTP request parameter is used to build a command string in the /goform/addRouting handler, enabling Command Injection via Shell metacharacters. Documented impact is severe (CW network-facing, with high likel...

CVE-2021-27113: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters...

PT-2021-17250

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: An issue was discovered where an HTTP request parameter is used in command string construction within the handler function of the "/goform/addRouting" route. This could lead to command injection...

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Remote Command Execution

Exploit Title: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 - RCE Date: 12-4-2021 Exploit Author: Jay Sharma Version: Genexis PLATINUM 4410 2.1 P4410-V2-1.28 Tested on: V2.1 CVE : CVE-2021-29003 steps to reproduce Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute...

Command injection in eslint-fixer

The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted...

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

Code injection

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

CVE-2021-29003

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

CVE-2021-29003: Improper Neutralization of Special Elements used in an OS Command

Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sysconfigvalid.xgi, as demonstrated by the sysconfigvalid.xgi?exeshell=%60telnetd%20%26%60 URI...

PT-2021-18017

Name of the Vulnerable Software and Affected Versions: Genexis PLATINUM 4410 version 2.1 P4410-V2-1.28 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters to "sys config valid.xgi", as demonstrated by the "sys config valid.xgi?exeshell=telnetd &" URI...

Genexis Platinum 4410 操作系统命令注入漏洞

Genexis Platinum 4410 is a router from Genexis A security vulnerability exists in the Genexis PLATINUM 4410 2.1 P4410-V2-1.28 that allows remote attackers to execute arbitrary code via shell metacharacters to validate system configuration...

VulnCheck KEV: CVE-2019-19597

D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAPAUTH HTTP header...

CVE-2020-27600

HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter...

CVE-2020-27600

HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter...

PT-2021-11412

Name of the Vulnerable Software and Affected Versions: D-Link Router DIR-846 version A1 100.26 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter in the "HNAP1/control/SetMasterWLanSettings.php" endpoint...