11722 matches found
CVE-2023-29120
Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system...
NETGEAR R8500 security vulnerabilities
The NETGEAR R8500 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R8500 v1.0.2.160, which stems from the sysNewPasswd parameter in the adminaccount.cgi component failing to correctly filter constructed command special characters, commands, and so on. An...
NETGEAR R8500 security vulnerabilities
The NETGEAR R8500 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR R8500 v1.0.2.160, which stems from the wangateway parameter in the bswfix.cgi component failing to correctly filter constructed command special characters, commands, and so on. An attacker...
CVE-2024-51246
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPTP function...
CVE-2024-51249
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...
CVE-2024-51251
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function...
CVE-2024-51246
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPTP function...
CVE-2024-51246
The DrayTek Vigor3900 running version 1.5.1.3 is vulnerable to an OS command injection vulnerability. Attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by invoking the doPPTP function. This vulnerability allows for high impact on confidentiality, integri...
CVE-2024-51253
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doL2TP function...
CVE-2024-51249
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the reboot function...
CVE-2024-51253: Improper Neutralization of Special Elements used in an OS Command
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doL2TP function...
CVE-2024-51246: Improper Neutralization of Special Elements used in an OS Command
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the doPPTP function...
PT-2024-34575
Name of the Vulnerable Software and Affected Versions Draytek Vigor3900 version 1.5.1.3 Description The issue allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function. This enables attackers to potentially gain unauthorized...
DrayTek Vigor 3900 security vulnerabilities
DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. The vulnerability can be exploited to execute arbitrary commands by injecting malicious commands into mainfunction.cgi and calling...
DrayTek Vigor 3900 security vulnerabilities
DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to inject malicious commands into mainfunction.cgi and execute arbitrary commands by...
CVE-2024-51251
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the backup function...
DrayTek Vigor 3900 security vulnerabilities
DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to inject malicious commands into mainfunction.cgi and execute arbitrary commands by...
CVE-2024-51251
The DrayTek Vigor3900 router (version 1.5.1.3 ) is vulnerable to an Improper Neutralization of Special Elements used in an OS Command vulnerability. An attacker can inject malicious commands into mainfunction.cgi and achieve arbitrary command execution by triggering the backup function . No speci...
Tenda AC6 injection vulnerability
The Tenda AC6 is a wireless router from the Chinese company Tenda. A command injection vulnerability exists in Tenda AC6 version 15.03.05.19, which stems from the parameter The failing to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited to...