Lucene search
+L

75 matches found

Positive Technologies
Positive Technologies
•added 2025/09/26 12:00 a.m.•13 views

PT-2025-39689

Name of the Vulnerable Software and Affected Versions WAYOS versions 22.03.17 LQ 04, LQ 05, LQ 06, LQ 07, and LQ 09 Description A flaw exists in WAYOS that allows for command injection. This occurs due to the manipulation of the Name argument within an unknown function of the /usb paswd.asp file...

7.5CVSS7.1AI score0.01989EPSS
SaveExploits0References14
CVE
CVE
•added 2025/08/22 12:00 a.m.•64 views

CVE-2025-57105

The D-Link DI-7400G+ router is vulnerable to a command injection flaw in its jhttpd program. Specifically, the sub_478D28 function in mng_platform.asp and the sub_4A12DC function in wayos_ac_server.asp fail to sanitize the ac_mng_srv_host parameter, which is stored in NVRAM and subsequently used ...

8AI score0.0288EPSS
SaveExploits3References3Affected Software1
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•13 views

D-Link DI-7400G+ 安全漏洞

The D-Link DI-7400G+ is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DI-7400G+ that originates from a command injection in the parameter acmngsrvhost in mngplatform.asp and wayosacserver.asp...

9.8CVSS7.4AI score0.0288EPSS
SaveExploits3References5
Cvelist
Cvelist
•added 2025/08/22 12:00 a.m.•28 views

CVE-2025-57105

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...

0.0288EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
•added 2025/08/22 12:00 a.m.•5 views

CVE-2025-57105

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...

8.5AI score0.0288EPSS
SaveExploits3References3
GithubExploit
GithubExploit
•added 2025/08/21 3:09 a.m.•229 views

Exploit for CVE-2025-57105

CVE-2025-57105 Command Injection BUGAuthor Xingyu Wu...

9.8CVSS8.2AI score0.0288EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2025/05/23 9:34 a.m.•19 views

CVE-2024-22547

WayOS IBR-7150 17.06.23 is vulnerable to Cross Site Scripting XSS...

4.7CVSS6.5AI score0.00373EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:20 a.m.•15 views

CVE-2024-44383

WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via mspinfohtm...

8CVSS7.1AI score0.00528EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:05 a.m.•14 views

CVE-2023-37793

WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgradefilter.asp...

9.8CVSS7.9AI score0.00928EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:05 a.m.•14 views

CVE-2023-37794

WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgradefilter.asp...

9.8CVSS8AI score0.02399EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/10/11 12:00 a.m.•10 views

WayOS FBM_292W 安全漏洞

WayOS FBM292W is a wireless router designed for coffee shops, small and medium-sized enterprises, chain organizations, and home environments with prominent Internet behavior management features from WayOS. A security vulnerability exists in WayOS FBM292W version 21.03.10V, which originates from t...

8.8CVSS7.3AI score0.01452EPSS
SaveExploits0References3
OSV
OSV
•added 2024/09/04 1:15 p.m.•13 views

CVE-2024-44383

WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via mspinfohtm...

6.8CVSS5.8AI score0.00528EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/04 1:15 p.m.•25 views

CVE-2024-44383

WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via mspinfohtm...

8CVSS0.00528EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/09/04 12:00 a.m.•13 views

CVE-2024-44383

WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via mspinfohtm...

7.1AI score0.00528EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/09/04 12:00 a.m.•13 views

WAYOS FBM-291W 安全漏洞

WAYOS FBM-291W is a wireless router from WAYOS. A security vulnerability exists in WAYOS FBM-291W version v19.09.11. An attacker can exploit the vulnerability to execute commands via mspinfohtm...

8CVSS7.2AI score0.00528EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/09/04 12:00 a.m.•14 views

PT-2024-31141 · Unknown · Wayos Fbm-291W

Name of the Vulnerable Software and Affected Versions: WAYOS FBM-291W version 19.09.11 Description: The issue is related to Command Execution via msp info htm. This vulnerability occurs through the "msp info htm" endpoint, allowing for command execution. Recommendations: For WAYOS FBM-291W versio...

8CVSS7.4AI score0.00528EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/09/04 12:00 a.m.•38 views

CVE-2024-44383

WAYOS FBM-291W v19.09.11 is vulnerable to Command Execution via mspinfohtm...

0.00528EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/04 12:00 a.m.•73 views

CVE-2024-44383

The WAYOS FBM-291W wireless router, specifically version v19.09.11 , is vulnerable to Command Execution via the msp_info_htm endpoint. This flaw allows an attacker to execute arbitrary commands on the device. While a patch is not currently available, the recommended temporary workaround is to res...

8CVSS7.2AI score0.00528EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/02/22 7:15 p.m.•13 views

CVE-2024-22547

WayOS IBR-7150 17.06.23 is vulnerable to Cross Site Scripting XSS...

4.7CVSS5.8AI score0.00373EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/22 7:15 p.m.•30 views

CVE-2024-22547

WayOS IBR-7150 17.06.23 is vulnerable to Cross Site Scripting XSS...

4.7CVSS6.2AI score0.00373EPSS
SaveExploits0References1
Rows per page
Query Builder