CVE-2024-57212

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the actionreboot function...

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

CVE-2024-57228

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2024-57211

The TOTOLINK A6000R wireless router (version V1.0.1-B20201211.2000 ) is susceptible to a command injection vulnerability. The flaw exists within the enable_wsh function due to improper handling of the modifyOne parameter. A remote attacker can exploit this by submitting a specially crafted reques...

CVE-2024-57214

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

CVE-2024-57211

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...

CVE-2024-57212

The TOTOLINK A6000R wireless router, specifically version V1.0.1-B20201211.2000 , is susceptible to a command injection vulnerability. The issue stems from improper neutralization of special elements in the opmode parameter within the action_reboot function. A remote attacker can exploit this by ...

CVE-2024-57222

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...

CVE-2024-57213

The TOTOLINK A6000R wireless router, specifically version V1.0.1-B20201211.2000 , contains a command injection vulnerability. The flaw exists in the action_passwd function's handling of the newpasswd parameter. A remote attacker can exploit this by submitting a special request to execute arbitrar...

CVE-2024-57211

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enablewsh function...

CVE-2024-57227

The Linksys E7350 router (version 1.1.00.032 ) contains a command injection vulnerability within the apcli_do_enr_pbc_wps function. The flaw is triggered via the ifname parameter, which allows for potential exploitation of the system. To mitigate the risk, it is recommended to disable the apcli d...

CVE-2024-57224

The Linksys E7350 wireless router, specifically version 1.1.00.032 , contains a command injection vulnerability. The flaw exists in the handling of the ifname parameter within the apcli_do_enr_pin_wps function. A remote attacker can exploit this by submitting a specially crafted request to execut...

CVE-2024-57227

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpbcwps function...

CVE-2024-43656

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC model chargers before version 24120701. Likelihood: Moderate – It might be difficult for an attacker to identify the fil...

CVE-2024-43651 Authenticated command injection in the <redacted> action leads to full remote code execution as root on the charging station

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability allows OS Command Injection as root This issue affects Iocharger firmware for AC models before version 241207101 Likelihood: Moderate – The binary does not seem to be used by the web interface, so it...

CVE-2024-43654

CVE-2024-43654 affects Iocharger AC EV charging stations running firmware older than 25010801. The issue is an improper neutralization of a special element used in a command, enabling OS command injection with root privileges. The vulnerability can be exploited via a network-attached interface se...

Exploit for Incorrect Authorization in Cacti

Cacti v1.2.22: Unauthenti...

BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-10)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by a command injection vulnerability. - All BeyondTrust Remote Support RS versions contain a command injection vulnerability which can be exploited through a...

CVE-2024-22063

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices...

CVE-2024-22063 ZTE ZENIC ONE R58 product has a CSV injection vulnerability

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices...