NETGEAR Embedded Software Command Injection

The vulnerability in NETGEAR’s embedded software exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TP-LINK TL-WR849N Router Command Injection

The vulnerability of TP-LINK’s TL-WR849N router software relates to the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary commands using special metashell shells...

Cisco IOS XE Code Execution

The vulnerability of the Cisco IOS XE operating system is related to the lack of measures to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

SaltStack Salt Configuration Management Remote Execution

The vulnerability of SaltStack Salt’s configuration management system and remote execution capabilities exists because measures to neutralize specific elements are not taken. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, a...

Ruby File fnmatch Unauthorized Access

The vulnerability of the File.fnmatch method in the Ruby programming language exists due to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using a specially...

SAP Gateway development environment Data Compromise

The vulnerability of the SAP Gateway and the SAP UI5 software platform exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to compromise data integrity from a remote location...

TP-Link M7350 Port Triggering Command Injection

The vulnerability of the Port Triggering function in TP-Link’s M7350 route switch software exists because measures to neutralize the special elements used in the operating system commands are not taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TP-Link M7350 Internal Port Command Injection

The vulnerability of the Internal Port component of the TP-Link M7350 microprogramming system controller exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

NX-OS Command-Line Interface Arbitrary Command Execution

The vulnerability of the command-line interface implementation of the networking operating system NX-OS exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to execute arbitrary...

mnt_ping.cgi Command Execution Privilege Escalation

The vulnerability of the mntping.cgi service in the microprogramming software of the Technicolor TD5336 router exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitra...