MikroTik RouterOS 缓冲区错误漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/traceroute process. A remote attacker cou...

Mikrotik RouterOs 缓冲区错误漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/traceroute process. A remote attacker cou...

CVE-2021-28143

/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute under System Tools...

Command injection

/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute under System Tools...

CVE-2021-28143

/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute under System Tools...

CVE-2021-28143

The CVE-2021-28143 vulnerability affects the D-Link DIR-841 router (versions 3.03 and 3.04). The issue resides in the /jsonrpc endpoint under System Tools and allows authenticated command injection via the ping, ping6, or traceroute functions. The Red Hat, CNVD, CNVD-style entries corroborate thi...

CVE-2020-35576

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...

Command injection

A Command Injection issue in the traceroute feature on TP-Link TL-WR841N V13 JP with firmware versions prior to 201216 allows authenticated users to execute arbitrary code as root via shell metacharacters, a different vulnerability than CVE-2018-12577...

CVE-2020-35576

CVE-2020-35576 is a command-injection vulnerability in the traceroute feature of TP-Link TL-WR841N (V13, JP) firmware prior to 201216. Authenticated users can execute arbitrary code as root via shell metacharacters. Affected firmware versions include V13 with build 161028, and vendor guidance fix...

PT-2021-11804 · Tp Link · Tp-Link Tl-Wr841N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR841N V13 JP versions prior to 201216 Description: A Command Injection issue in the traceroute feature allows authenticated users to execute arbitrary code as root via shell metacharacters. Recommendations: For versions prior to...

VulnCheck KEV: CVE-2009-2288

statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 ping or 2 Traceroute parameters...

FinalRecon v1.1.0 - The Last Web Recon Tool You'll Need

FinalRecon is an automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after another it can provide similar results keeping...

Nuubi Tools - Information Ghatering, Scanner And Recon

Nuubi Tools: Information-ghatering|Scanner|Recon Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links...

@rebelware/fibonacci-generator (=0.0.3), @tgwf/greentrace-cli (>=0.0.1 <=0.2.0) +4 more potentially affected by unknown CVE via traceroute (>=0.0.3 <=1.0.0)

traceroute NPM version =0.0.3, =0.0.1, =0.0.1, =1.0.1, =1.0.2 - securiwiser-web-check =1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RJVJ-673Q-4HFW...

Command Injection in traceroute

All versions of traceroute are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The trace function is vulnerable and can be abused if the host value is controlled by an...

GHSA-RJVJ-673Q-4HFW Command Injection in traceroute

All versions of traceroute are vulnerable to Command Injection. The package fails to sanitize input and passes it directly to an exec call, which may allow attackers to execute arbitrary code in the system. The trace function is vulnerable and can be abused if the host value is controlled by an...

The vulnerability of the RouterOS operating system’s Traceroute service allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system’s Traceroute service is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted packet...

traceroute injection vulnerability

traceroute is a package for executing traceroute-related commands from the American software developer James Weston. An injection vulnerability exists in the traceroute package version 1.0.0 and earlier Node.js. This vulnerability can be exploited by remote attackers to disrupt the operation of a...

OS Command Injection

node-traceroute is vulnerable to OS command injection. The Child.exec method accepts untrusted user input and allows an attacker to inject arbitrary OS commands after a newline character...

CVE-2018-21268

The traceroute aka node-traceroute package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character...