Tenda i29 安全漏洞

The Tenda i29 is a wireless router from the Chinese company Tenda. The Tenda i29 suffers from a command execution vulnerability that stems from the pingSet method failing to properly filter construct command special characters, commands, etc. The vulnerability can be exploited to cause arbitrary...

NETGEAR WNR2000 Command Execution Vulnerability

The NETGEAR WNR2000 is a wireless router from NETGEAR. A command execution vulnerability exists in NETGEAR WNR2000 v4 version 1.0.0.70, which stems from an application failing to properly filter constructed command special characters, commands, and more. An attacker could exploit this vulnerabili...

CVE-2023-4724

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the wpquery parameter which allows an attacker to run arbitrary command on the remote server...

CVE-2023-4724

The Export any WordPress data to XML/CSV WordPress plugin before 1.4.0, WP All Export Pro WordPress plugin before 1.8.6 does not validate and sanitise the wpquery parameter which allows an attacker to run arbitrary command on the remote server...

CVE-2021-42796

An issue was discovered in ExecuteCommand in AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior that allows unauthenticated arbitrary commands to be executed...

CVE-2023-48394

Kaifa Technology WebITR is an online attendance system, its file uploading function does not restrict upload of file with dangerous type. A remote attacker with regular user privilege can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

CVE-2023-48376

SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service...

CVE-2023-48380 Softnext Mail SQR Expert - Command Injection

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command,...

CVE-2023-48376

CVE-2023-48376 affects SmartStar Software CWS (a web-based integration platform). The flaw lies in the file upload function, which does not restrict dangerous file types, enabling an unauthenticated remote attacker to upload arbitrary files to execute commands or disrupt service. The CVSS vector ...

The vulnerability of the sub_4119A0 function in the microprogramming software of the TOTOLINK X6000R router allows a hacker to execute arbitrary code.

The vulnerability of the sub4119A0 function shttpd in the TOTOLINK X6000R router microprogramming system exists due to the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Microsoft Windows Multiple Vulnerabilities (KB5033375)

This host is missing an important security update according to Microsoft KB5033375 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2023-31300 · Unknown · Wrc-X3000Gs

Name of the Vulnerable Software and Affected Versions: WRC-X3000GSN version 1.0.2 WRC-X3000GS versions 1.0.24 and earlier WRC-X3000GSA versions 1.0.24 and earlier Description: The issue allows a network-adjacent attacker with administrative privilege to execute an arbitrary OS command by sending ...

ELECOM WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and, WRC-X3000GSA v1.0.24 and versions Security Vulnerabilities

The ELECOM WRC-X3000GS2-W and ELECOM WRC-X3000GSN are both wireless routers from ELECOM. A security vulnerability exists in the ELECOM WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and earlier, which originated from a vulnerability that allows an attacker with...

Tenda AX12 list parameter command execution vulnerability

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A command execution vulnerability exists in Tenda AX12 version V22.03.01.46, which is caused due to the failure of the "list" parameter of /goform/SetNetControlList to correctly filter constructed command special character...

Tenda W30E setFixTools Function Command Execution Vulnerability

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which stems from the setFixTools function failing to correctly filter constructor command special characters, commands, etc. The vulnerability can be exploite...

Tenda W30E setUmountUSBPartition Function Command Execution Vulnerability

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which stems from the setUmountUSBPartition function failing to correctly filter constructor command special characters, commands, etc. The vulnerability can b...

PT-2023-8993 · Tp Link · Tp-Link N300 Wireless Access Point +1

Name of the Vulnerable Software and Affected Versions: Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 version 5.1.0 Build 20220926 Tp-Link N300 Wireless Access Point EAP115 V4 version 5.0.4 Build 20220216 Description: A command execution vulnerability exists in the tddpd enable te...

Tenda AX3 Command Execution Vulnerability

The Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A command execution vulnerability exists in Tenda AX3 version V16.03.12.11, which originates from the handler function of /goform/telnet failing to properly filter construct command special characters,...

Tenda W30E Handler Function Command Execution Vulnerability

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from the handler function of /goform/telnet failing to correctly filter construct command special characters, commands, etc. The vulnerabilit...

The vulnerability of the NPM package, openSSL, arises from the lack of measures to sanitize input data, allowing attackers to execute arbitrary commands.

The vulnerability of the NPM package, openSSL, is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...