Lucene search
+L

22 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:34 a.m.•20 views

CVE-2024-41318

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

9.8CVSS8AI score0.02429EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-53546

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01678EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/07/28 12:00 a.m.•18 views

The vulnerability of the apcli_wps_gen_pincode function in the Netgear RAX5 router’s built-in software allows a hacker to execute arbitrary commands.

The vulnerability of the apcliwpsgenpincode function in Netgear RAX5 router’s built-in software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.5CVSS5.9AI score0.01177EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2025/05/14 12:00 a.m.•19 views

NETGEAR RAX5 apcli_wps_gen_pincode function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the failure of the ifname parameter in the apcliwpsgenpincode function to correctly filter constructed command special characters, commands, and so on. An attacker can...

9.8CVSS7.4AI score0.01177EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/05 5:18 p.m.•32 views

CVE-2024-57232

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

9.8CVSS5.8AI score0.01177EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/05 5:18 p.m.•29 views

CVE-2024-57232

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

9.8CVSS0.01177EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/05 12:00 a.m.•73 views

CVE-2024-57232

CVE-2024-57232 affects NETGEAR RAX5 (AX1600 WiFi Router) with a command injection vulnerability in the ifname parameter of the apcli_wps_gen_pincode function (v1.0.2.26). The issue arises from insufficient input filtering of crafted characters, enabling potential arbitrary command execution via t...

9.8CVSS8.2AI score0.01177EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/05 12:00 a.m.•3 views

CVE-2024-57232: Improper Neutralization of Special Elements used in a Command

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

9.8CVSS6.7AI score0.01177EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/05 12:00 a.m.•33 views

CVE-2024-57232

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

0.01177EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/02/25 12:00 a.m.•16 views

The vulnerability of the apcli_wps_gen_pincode() function in the mtkwifi.lua script of the TOTOLINK X5000R router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the apcliwpsgenpincode function in the mtkwifi.lua script of the TOTOLINK X5000R router’s software is related to the lack of measures taken to secure input data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotely...

6.5CVSS5.8AI score0.00791EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2025/02/24 12:00 a.m.•12 views

TOTOLINK X5000R apcli_wps_gen_pincode Command Injection Vulnerability

The TOTOLINK X5000R is a router product from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that originates from the apcliwpsgenpincode function, no details of the vulnerability are provided at this time...

6.5CVSS6.9AI score0.00791EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/21 12:00 a.m.•4 views

CVE-2025-25605: Improper Neutralization of Special Elements used in a Command

Totolink X5000R V9.1.0u.6369B20230113 is vulnerable to command injection via the apcliwpsgenpincode function in mtkwifi.lua...

6.5CVSS5.9AI score0.00791EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/02/21 12:00 a.m.•29 views

CVE-2025-25605

Totolink X5000R V9.1.0u.6369B20230113 is vulnerable to command injection via the apcliwpsgenpincode function in mtkwifi.lua...

0.00791EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/10 12:00 a.m.•8 views

CVE-2024-57223

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

8AI score0.01678EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•3 views

CVE-2024-57223: Improper Neutralization of Special Elements used in a Command

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

9.8CVSS5.9AI score0.01678EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/10 12:00 a.m.•36 views

CVE-2024-57223

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

0.01678EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/22 2:15 p.m.•14 views

CVE-2024-41318

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

9.8CVSS5.8AI score0.02429EPSS
SaveExploits1References2
NVD
NVD
•added 2024/07/22 2:15 p.m.•37 views

CVE-2024-41318

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

9.8CVSS0.02429EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/07/22 12:00 a.m.•24 views

CVE-2024-41318

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

8AI score0.02429EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/07/22 12:00 a.m.•33 views

CVE-2024-41318

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

0.02429EPSS
SaveExploits1References2
Rows per page
Query Builder