PT-2026-93351

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A low-privileged remote attacker with operator credentials can execute commands with root privileges on the device. This is possible through a command injection...

EUVD-2025-119998

The Wishlist and Save for later for Woocommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.22 via the 'awwlmremoveaddedwishlistpage' AJAX action due to missing validation on a user controlled key. This makes it possible for...

CVE-2022-33897

A directory traversal vulnerability exists in the webserver /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2022-33897: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the webserver /ajax/remove/ functionality of Robustel R1510 3.1.16. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability...

PT-2022-21894

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.1.16 Description A directory traversal issue exists in the web server /ajax/remove/ functionality. This allows an attacker to send a specially-crafted network request, potentially leading to arbitrary file deletion by...

Robustel R1510: Operating System Command Injection Vulnerability

Robustel R1510 is an industrial VPN router from Robustel China.Robustel R1510 is vulnerable to an operating system command injection vulnerability, which stems from the fact that specially crafted network packets can be affected by a command injection vulnerability in the /ajax/remove/ API, which...

CVE-2022-33328: Improper Neutralization of Special Elements used in an OS Command

Multiple command injection vulnerabilities exist in the webserver ajax endpoints functionalities of Robustel R1510 3.3.0. A specially-crafted network packets can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.The /ajax/remove/ API...

PT-2022-3766

Name of the Vulnerable Software and Affected Versions Robustel R1510 version 3.3.0 Description The issue is related to command injection vulnerabilities in the web server ajax endpoints functionalities. A specially-crafted network packet can lead to arbitrary command execution. An attacker can se...