CVE-2021-40859

CVE-2021-40859 Exploit de puertas traseras de Auerswald COMpact 8.0B Acerca de Se descubrieron puertas traseras en dispositivos Auerswald COMpact 5500R 7.8A y 8.0B, que permiten a atacantes con acceso a la aplicación web de gestión obtener acceso administrativo completo al dispositivo. Detalles d...

CVE-2022-22274_CVE-2023-0656

SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 El 24 de marzo de 2022, SonicWall publicó un aviso con los siguientes detalles: Una vulnerabilidad de desbordamiento de búfer basada en pila en SonicOS a través de una solicitud HTTP permite que un atacante remoto no autenticado cause una Denegación d...

CVE-2026-101001

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2026-101001 Netcore NBR200V2 Web Management network_tools eval os command injection

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

EUVD-2026-88083

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2026-101001

A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/networktools of the component Web Management Interface. Such manipulation of the argument QUERYSTRING leads to os command injection. It is possible to launch the attack...

CVE-2026-100896

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is...

FatPipe WARP/IPVPN/MPVPN - Authorization Bypass

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. id: CVE-2021-27858 info: name:...

Karel IP Phone IP1211 Web Management Panel - Local File Inclusion

Karel IP Phone IP1211 Web Management Panel is vulnerable to local file inclusion and can allow remote attackers to access arbitrary files stored on the remote device via the 'cgiServer.exx' endpoint and the 'page' parameter. id: CVE-2025-34023 info: name: Karel IP Phone IP1211 Web Management Pane...

CVE-2026-100896 TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is...

CVE-2026-100896

The TOTOLINK N150RT (version 3.4.0-B20201030) is vulnerable to OS command injection via its Web Management Interface . The root cause is the improper handling of the wlanif argument within the "function system" of the /boafrm/formWlSiteSurvey file. This flaw allows for remote exploitation , and p...

EUVD-2026-88060

A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the function system of the file /boafrm/formWlSiteSurvey of the component Web Management Interface. This manipulation of the argument wlanif causes os command injection. Remote exploitation of the attack is...

Electrolink-FM-DAB-TV

Electrolink-FM-DAB-TV Para CVE-2025-51040 Electrolink FM/DAB/TV Transmitter Web Management System Vulnerabilidad de acceso no autorizado en Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07 y Display v1.4, v1.2 Descripción El sistema de gestión web del transmisor...

CVE-2017-6079-Blind-Command-Injection-In-Edgewater-Edgemarc-Devices-Exploit

Introducción Este exploit fue desarrollado basado en la descripción técnica de depthsecurity root@kitploit: https://depthsecurity.com/blog/cve-2017-6079-blind-command-injection-in-edgewater-edgemarc-devices Descripción La aplicación de gestión web HTTP en los dispositivos Edgewater Networks...

CVE-2020-13259

CVE-2020-13260 PoC de toma de control total de la cuenta en RAD SecFlow-1v Una vulnerabilidad en la interfaz de gestión basada en web de RAD SecFlow-1v podría permitir que un atacante remoto no autenticado lleve a cabo un ataque de falsificación de solicitud entre sitios CSRF en un sistema...

CVE-2024-20404

Descripción Una vulnerabilidad en la interfaz de administración basada en web de Cisco Finesse podría permitir a un atacante remoto no autenticado realizar un ataque SSRF en un sistema afectado. Esta vulnerabilidad se debe a una validación insuficiente de la entrada proporcionada por el usuario...

CVE-2021-40905

CVE-2021-40905 - RCE mediante un archivo .mkp manipulado Aplicación: Consola web de gestión de CheckMK Revisión de software: Menor o igual a 2.0.0p17 Tipo de ataque: RCE Solución: Por determinar, o los MKP compartidos en https://exchange.checkmk.com/ son revisados manualmente por CheckMk, que...

CVE-2021-40904

CVE-2021-40904 - RCE a través de la aplicación integrada Dokuwiki de CheckMk Aplicación: Consola web de gestión de CheckMK Revisión del software: De 1.5.0 a 1.5.0p25 Tipo de ataque: RCE Solución: Actualice a la versión 1.6 o superior. Resumen: La consola web de gestión de CheckMk Raw Edition...

Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among...

CVE-2026-19745

Introduction Hi everyone, back in May I found decent vulnerablities in my router, today I can finally show everyone! Both vulnerablities in this repo are authenticated Denial of Service vulnerablities! I do not know the exact techial details of how or why these vulnerablities work, we never got a...