CVE-2022-37083

CVE-2022-37083 affects TOTOLINK A7000R (V9.1.0u.6115_B20201022). A command injection flaw exists via the ip parameter in setDiagnosisCfg. Impact per sources implies potential arbitrary command execution with high impact; CVSSv3.1 base score 7.8 (L, L, Phr, U). Exploitation status is not provided ...

CVE-2022-37081

TOTOLINK A7000R V9.1.0u.6115B20201022 was discovered to contain a command injection vulnerability via the command parameter at setting/setTracerouteCfg...

EUVD-2022-39723

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...

CVE-2022-36509

CVE-2022-36509 affects H3C GR3200 MiniGR1B0V100R014. The vulnerability is a command injection in the DelL2tpLNSList endpoint triggered via the param parameter. NVD CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW authentication/privilege requirements, and C/I/A HIGH. Connected sources...

CVE-2022-36487

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-36482

CVE-2022-36482 applies to TOTOLINK N350RT, version 9.3.5u.6139_B20201216, where a command injection flaw exists in the function setLanguageCfg exposed through the lang parameter . The vulnerability could allow arbitrary command execution with local access and could impact confidentiality, integri...

CVE-2022-36458

TOTOLINK A3700R V9.1.2u.6134B20201202 was discovered to contain a command injection vulnerability via the command parameter in the function setTracerouteCfg...

CVE-2022-36456

TOTOLink A720R V4.1.5cu.532B20210610 was discovered to contain a command injection vulnerability via the username parameter in /cstecgi.cgi...

PT-2022-23401 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A command injection issue was found via the host time parameter in the NTPSyncWithHost function. This allows for potential exploitation. Recommendations: For TOTOLINK N350RT version...

EUVD-2022-35638

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-35153

FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/faxsend.php...

get-npm-package-version 命令注入漏洞

get-npm-package-version is a package for hoperyy individual developers. It is used to get the npm package version. A command injection vulnerability exists in get-npm-package-version before 1.0.7, which is caused by command injection via the main function in index.js...

PT-2022-8886 · Unknown · Monorepo-Build

Name of the Vulnerable Software and Affected Versions: monorepo-build affected versions not specified Description: A command injection issue affects the package. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents whe...

EUVD-2022-37481

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte4C0160...

google-cloudstorage-commands 命令注入漏洞

google-cloudstorage-commands is a set of commands for node and gcloud interactions from the individual developers at sam. A security vulnerability exists in google-cloudstorage-commands, which stems from the vulnerability of this package to command injection attacks...

Schneider Electric SpaceLogic C-Bus Home Controller (5200WHC2) Remote Root Exploit

Schneider Electric SpaceLogic C-Bus Home Controller 5200WHC2 versions 1.31.460 and below suffer from an authenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands as the root user via the name GET parameter in delsnap.pl Perl/CGI script...

Spryker Commerce OS 操作系统命令注入漏洞

Spryker Commerce OS is a B2B, B2C and Marketplace solution from Spryker Germany. A security vulnerability exists in Spryker Commerce OS version 1.4.2 that originates from allowing an attacker to perform remote command execution...

SUSE-SU-2022:2357-1 Security update for python3

This update for python3 fixes the following issues: - CVE-2015-20107: avoid command injection in the mailcap module bsc1198511...

EUVD-2022-37548

Tenda AX1803 v1.0.0.12890 was discovered to contain a command injection vulnerability via the function WanParameterSetting...

EUVD-2022-37547

Tenda AX1803 v1.0.0.12890 was discovered to contain a command injection vulnerability via the function setipv6status...