CVE-2019-13561

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the onlinefirmwarecheck.cgi checkfwurl parameter...

Code injection

D-Link DIR-655 C devices before 3.02B05 BETA03 allow remote attackers to execute arbitrary commands via shell metacharacters in the onlinefirmwarecheck.cgi checkfwurl parameter...

CVE-2019-13561

The CVE affects D-Link DIR-655 C devices prior to version 3.02B05 BETA03, where an attacker can remotely execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter. Affected component is the firmware check URL handling in DIR-655 C; root cause is u...

PT-2019-13422

Name of the Vulnerable Software and Affected Versions D-Link DIR-655 C devices before version 3.02B05 BETA03 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the "check fw url" parameter of the "online firmware check.cgi" endpoint...

PT-2019-12869

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn launcher.64 binary is setuid root and...

CVE-2019-13481

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13482

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

Command injection

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

Command injection

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13482

CVE-2019-13482 affects D-Link DIR-818LW devices with firmware 2.06betab01. The issue is a command injection in HNAP1, exploitable via shell metacharacters in the Type field when calling SetWanSettings, and requires authentication. CVSS metrics indicate network exposure with high impact on confide...

CVE-2019-13482

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

CVE-2019-13481

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13481: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MTU field to SetWanSettings...

CVE-2019-13482: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

CVE-2019-13128

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...

Command injection

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...

CVE-2019-13128

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...

CVE-2019-13128

CVE-2019-13128 affects D-Link DIR-823G devices with firmware 1.02B03. The issue is a command injection in HNAP1 exploitable with Authentication , via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings . Public details report the impact as arbitrary command execution ...

CVE-2019-13128: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...

Sophos XG firewall Admin Portal shell escape vulnerability

Sophos XG firewall is a next-generation endpoint protection and enterprise-class firewall product from Sophos UK.Admin Portal is one of the management portals. A security vulnerability exists in /webconsole/Controller of Admin Portal in Sophos XG firewall version 17.0.8 MR-8. The vulnerability ca...