PT-2026-118376

A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the argument setSWMProfile leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly...

PT-2026-118356

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set table of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launch...

PT-2026-118386

A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest certificate of the file /cgi-bin/mainfunction.cgi of the component IPsec Handler. Such manipulation of the argument option leads to command injection. The attack can be launch...

PT-2026-118364

A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Performing a manipulation of the argument action results in path traversal. The attack is possible to be carried out...

PT-2026-118378

A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename table of the file /cgi-bin/mainfunction.cgi of the component Rename Table Handler. This manipulation of the argument newtable causes command injection. The attack can be initiate...

PT-2026-118358

A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpoint. Such manipulation leads to command injection. The attack can be executed remotely. The exploit has been disclose...

PT-2026-118377

A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the component swmconfigupload. The manipulation of the argument multipart results in path traversal. It is possible to launch the...

CVE-2026-112370

A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was...

CVE-2026-112360

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of...

CVE-2026-112360 Netis EAP930 CGI Endpoint debug return200 backdoor

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of...

CVE-2026-112360 Netis EAP930 CGI Endpoint debug return200 backdoor

A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of...

CVE-2026-112360

A security vulnerability exists in the Netis EAP930 (version 1.250905.115454) within the CGI Endpoint component. The issue resides in the return200 function of the /cgi-bin/debug file, where manipulating the SIGNATURE argument can lead to a backdoor . While the attack can be initiated remotely, i...

CVE-2026-107571

Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-privileged accounts when the product is installed in a folder whose permissions are inherited from a writable parent,...

DrayTek Vigor2960: Input validation error vulnerability

The DrayTek Vigor2960 1.5.1.6 revision 8218 version has a security vulnerability. This vulnerability stems from the operation of the settable function in the /cgi-bin/mainfunction.cgi file of the CGI Process component, which may lead to remote command injection...

DrayTek Vigor2960: Input validation error vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from improper handling of the uploadlangs function in the /cgi-bin/mainfunction.cgi file. It may lead to command injection, and attackers could execute commands remotely...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from incorrect handling of the setSWMProfile parameter in the function setSWMProfile located in the file/cgi-bin/mainfunction.cgi. This could lead to path traversal attacks, and attackers could...

DrayTek Vigor2960 path traversal vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a path traversal vulnerability. This vulnerability stems from the handling of the 'action' parameter in the '/cgi-bin/mainfunction.cgi' file within component Apmupload, allowing for path traversal attacks. Attackers can exploit this vulnerability remote...

DrayTek Vigor2960: Input validation error vulnerability

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from the incorrect handling of parameters in the option field of the ruequestcertificate function in the /cgi-bin/mainfunction.cgi file within the IPsec Handler component. This could lead to remote...

DrayTek Vigor2960: Permissions, licensing, and access control issues

DrayTek Vigor2960 1.5.1.6 Revision 8218 has a security vulnerability. This vulnerability stems from improper handling of parameters uploadpath/uploadname in the commonupload component of the file/cgi-bin/mainfunction.cgi. It could allow remote attackers to upload files without restrictions...

H3C Magic NX15 Buffer Error Vulnerability

The H3C Magic NX15 NX15V100R017 version has a buffer overflow vulnerability. This vulnerability stems from incorrect operations on the sub416874 function located in the /usr/bin/usrlist file. It may lead to a stack buffer overflow and allow for remote attacks...