1885 matches found
TOTOLINK CP900 setUpgradeUboot Function Command Injection Vulnerability
The TOTOLINK CP900 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK CP900 suffers from a command injection vulnerability that stems from the setUpgradeUboot function failing to properly filter constructor command special characters, commands, etc. No detailed vulnerabilit...
NETGEAR JWNR2000v2 sub_435E04 Function Command Injection Vulnerability
The NETGEAR JWNR2000v2 is a wireless router from NETGEAR. The NETGEAR JWNR2000v2 suffers from a command injection vulnerability that stems from the sub435E04 function parameter host failing to correctly filter constructor command special characters, commands, and so on. No details of the...
WAVLINK WL-WN530H4 Command Injection Vulnerability
WAVLINK WL-WN530H4 is a high-performance USB wireless card from China RuiYin WAVLINK that supports 802.11ac dual-band Wi-Fi. WAVLINK WL-WN530H4 suffers from a command injection vulnerability, which originates from the failure of the pingtest function in adm.cgi to correctly filter pingIp paramete...
NETGEAR RAX5 vif_enable function command injection vulnerability
The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that originates from the iface parameter in the vifenable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...
PT-2025-21151 · Apache · Apache Struts
Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No specific details about affected devices, real-world incidents, or technical exploitation details such as API endpoints, vulnerable...
Tenda RX3 Command Injection Vulnerability
Tenda RX3 is a dual-band WiFi 6 home wireless router from Tenda China. It is used for home network coverage and supports high-speed wireless connection. The Tenda RX3 suffers from a command injection vulnerability that stems from the failure of the file /goform/telnet to properly filter construct...
NETGEAR JWNR2000v2 cmd_wireless function command injection vulnerability
The NETGEAR JWNR2000v2 is a wireless router from NETGEAR. The NETGEAR JWNR2000v2 suffers from a command injection vulnerability that stems from the cmdwireless function parameter host failing to properly filter constructor command special characters, commands, and so on. No details of the...
CVE-2025-32469
The CVE-2025-32469 issue affects Siemens RUGGEDCOM ROX devices (MX5000, MX5000RE, RX1400, RX1500, RX1501, RX1510, RX1511, RX1512, RX1524, RX1536, RX5000) with all versions before V2.16.5. The root cause is inadequate server-side input sanitation in the web interface’s ping tool, allowing an authe...
CVE-2025-45858
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN00459fdc function...
CVE-2025-45858
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability via the FUN00459fdc function...
CVE-2024-46506
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php...
Dell Storage Manager Command Injection Vulnerability
Dell Storage Manager is a centralized storage management platform from Dell USA. A command injection vulnerability exists in Dell Storage Manager that stems from improper neutralization of special elements in commands, no details of the vulnerability are available at this time...
CVE-2025-28203
Victure RX1800 ENV1.0.0r12110933 was discovered to contain a command injection vulnerability...
CVE-2025-28203
CVE-2025-28203 affects the Victure RX1800 router (EN_V1.0.0_r12_110933). The entry describes a command injection vulnerability with CVSSv3.1 base score 8.8 (High): adjacent attack vector, no privileges or user interaction required, and impacts to confidentiality, integrity, and availability are a...
CVE-2025-45491
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter...
Tenda AC9 Command Injection Vulnerability
Tenda AC9 is a router firmware. Tenda AC9 suffers from a command injection vulnerability that stems from improper handling of the Telnet function, which could lead to the execution of arbitrary commands. No detailed vulnerability details are provided at this time...
NETGEAR RAX50 Command Injection Vulnerability
The NETGEAR RAX5 is a wireless router from NETGEAR. A command injection vulnerability exists in the NETGEAR RAX50. The vulnerability stems from improper handling of the ifname parameter in the apclidoenrpinwps function, which can be exploited by an attacker to launch an attack and cause the syste...
openssh security update
An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
CVE-2025-43842
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7, trainsetdir4 and sr2 take user input and pass it to the preprocessdataset function, which concatenates them into a...