CVE-2023-52040

An issue discovered in TOTOLINK X6000R v9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the sub41284C function...

PT-2024-14368

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description An issue in TOTOLINK X6000R allows attackers to run arbitrary commands via the sub 415AA4 function. Recommendations For TOTOLINK X6000R version 9.4.0cu.852 B20230719, consider disabling...

PT-2024-14367

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description An issue in TOTOLINK X6000R allows attackers to run arbitrary commands via the sub 415C80 function. Recommendations For TOTOLINK X6000R version 9.4.0cu.852 B20230719, as a temporary...

PT-2024-14369 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.852 B20230719 Description: An issue in TOTOLINK X6000R allows attackers to run arbitrary commands via the sub 41284C function. Recommendations: For TOTOLINK X6000R version 9.4.0cu.852 B20230719, consider...

CVE-2023-52039

An issue discovered in TOTOLINK X6000R v9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the sub415AA4 function...

CVE-2023-52038

An issue discovered in TOTOLINK X6000R v9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the sub415C80 function...

Arbitrary Command Injection

Overview org.webjars.npm:network is a the missing network utilities in Node.js. Affected versions of this package are vulnerable to Arbitrary Command Injection due to use of the childprocess exec function without input sanitization. If attacker-controlled user input is given to the macaddressfor...

Arbitrary Command Injection

Overview network is a the missing network utilities in Node.js. Affected versions of this package are vulnerable to Arbitrary Command Injection due to use of the childprocess exec function without input sanitization. If attacker-controlled user input is given to the macaddressfor function of the...

TOTOLINK A3700R security vulnerabilities

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R is vulnerable to a command injection vulnerability that stems from the setOpModeCfg method failing to properly filter constructed command special characters, commands, and more. An attacker can...

AIX Buffer Overflow Command Execution

The vulnerability of the AIX operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary commands using invscout...

macOS Terminal Emulator Disclosure

The vulnerability of the macOS terminal emulator is related to the lack of protection for service data. Exploiting this vulnerability allows a hacker to execute arbitrary control commands...

Corporate Access Command Injection

The vulnerability of the software for managing and controlling access to corporate resources and applications of IBM Security Verify Governance is related to insufficient validation of arguments passed to the command line. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

Multiple issues involving quote API in shlex

Issue 1: Failure to quote characters Affected versions of this crate allowed the bytes and \xa0 to appear unquoted and unescaped in command arguments. If the output of quote or join is passed to a shell, then what should be a single command argument could be interpreted as multiple arguments. Thi...

CVE-2023-20258: Undefined Security Weakness

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper processing of serialized Java objects by the affected...

CVE-2023-52042

An issue discovered in sub4117F8 function in TOTOLINK X6000R V9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the 'lang' parameter...

CVE-2023-52042

An issue discovered in sub4117F8 function in TOTOLINK X6000R V9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the 'lang' parameter...

Design/Logic Flaw

An issue discovered in sub4117F8 function in TOTOLINK X6000R V9.4.0cu.852B20230719 allows attackers to run arbitrary commands via the 'lang' parameter...

TOTOLINK EX1200T Command Injection Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK EX1200T version V4.1.2cu.5232B20210713, which stems from the main method failing to properly filter construct command special characters, commands, and so on. An...

Command Injection Vulnerability in DIR-822+ V1.0.2 of AUO Electronic Equipment (Shanghai) Co.

DIR-822 is a wireless router from D-Link, a Chinese company. A command injection vulnerability exists in the AUO Electronic Devices Shanghai Co. DIR-822+ version V1.0.2, which stems from the SetStaticRouteSettings function failing to correctly filter constructor command special characters,...

TOTOLINK A3700R UploadFirmwareFile Method Command Injection Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3700R v9.1.2u.5822B20200513 version, which stems from the UploadFirmwareFile method failing to correctly filter constructed command special characters,...