Tenda W30E Command Injection Vulnerability

The Tenda W30E is a wireless router device that provides Internet access, wireless coverage and more. A command injection vulnerability exists in the formWriteFacMac function of the /goform/WriteFacMac file in version 1.0.1.25633 of the Tenda W30E, which can be exploited by an attacker to execute...

CVE-2024-30928

SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids' Parameter in ajax/query.slide.next.inc...

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

CVE-2024-30982

SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arbitrary SQL commands via the upid parameter in the /view-user-detail.php file...

CVE-2024-30985

CVE-2024-30985 affects phpgurukul Client Management System version 1.1. The vulnerability is a SQL Injection in the B/W Dates Reports page, exploitable via the todates/fromdate parameters, enabling arbitrary SQL execution. CVSS: 3.1, 9.8 base score (CRITICAL); impact on confidentiality, integrity...

CVE-2024-2912

CVE-2024-2912 (BentoML) has documented insecure deserialization leading to remote code execution (RCE). The vulnerability arises when a serialized object is crafted to execute OS commands during deserialization and sent to BentoML endpoints via POST requests, allowing attackers to run arbitrary c...

Small CRM SQL Injection Vulnerability (CNVD-2025-23151)

Small CRM is a customer relationship management system. A SQL injection vulnerability exists in Small CRM, which stems from a lack of validation of externally-entered SQL statements in the change password handler. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

By default, SANnav OVA is shipped with root user login enabled (CVE-2024-2859)

By default, SANnav OVA is shipped with root user login enabled. Product Affected All Brocade OVA SANnav versions Mitigation Starting with SANnav OVA version v2.3.0 and later versions, a root account is not required for installation and management of the SANnav. If an administrator is uncomfortabl...

CVE-2023-33806

Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands...

CVE-2023-4856

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint...

CVE-2023-4856

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint...

CVE-2023-4856

A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbitrary commands on a specific API endpoint...

CVE-2024-1655 ASUS WiFi Router - OS Command Injection

Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to execute arbitrary system commands by sending a specially crafted request...

CVE-2023-33806

Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands...

PT-2024-22740

Name of the Vulnerable Software and Affected Versions BentoML affected versions not specified Description An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability,...

Buffalo wireless LAN routers 安全漏洞

Buffalo wireless LAN routers is a series of routers from Buffalo Japan. A security vulnerability exists in Buffalo wireless LAN routers. An attacker could exploit the vulnerability to execute arbitrary operating system commands...

CVE-2023-33806

Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands...

Planet IGS-4215-16T2S IP address feature command injection vulnerability

The Planet IGS-4215-16T2S is an industrial grade switching device. The Planet IGS-4215-16T2S suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the host via the IP address...

Planex MZK-MF300N 命令注入漏洞

The Planex MZK-MF300N is a world's smallest wireless LAN multi-pocket router from Planex Japan. An operating system command injection vulnerability exists in the Planex MZK-MF300N. An attacker could exploit this vulnerability to execute arbitrary commands by sending specially crafted requests to...

CVE-2023-33806

The CVE-2023-33806 issue concerns Hikvision Interactive Tablet DS-D5B86RB/B, version 2.3.0 build220119, with insecure default configurations that allow an attacker to execute arbitrary commands. The connected sources (Red Hat and CNNVD/NVD/CVE lists, and PT-Security note) confirm the product and ...