openssh security update

An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

CVE-2025-43842

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7, trainsetdir4 and sr2 take user input and pass it to the preprocessdataset function, which concatenates them into a...

CVE-2025-45042

Tenda AC9 v15.03.05.14 was discovered to contain a command injection vulnerability via the Telnet function...

CVE-2024-57229

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...

CVE-2024-57230

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

TOTOLINK A800R Command Injection Vulnerability (CNVD-2025-09933)

TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A800R suffers from a command injection vulnerability that stems from the QUERYSTRING parameter in downloadFile.cgi failing to correctly filter constructed command special characters, commands, and so on. No...

TOTOLINK A830R Command Injection Vulnerability (CNVD-2025-09866)

The TOTOLINK A830R is a wireless dual-band router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK A830R version V4.1.2cu.5182B20201102, which stems from the failure of the NoticeUrl parameter in the setNoticeCfg function to correctly filter constructed...

CVE-2025-45490

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...

CVE-2025-45488

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter...

CVE-2025-22476

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Remote executi...

PT-2025-20006 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Struts affected versions not specified Description: The issue concerns a command injection problem. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2025-45489

CVE-2025-45489 affects Linksys E5600 firmware v1.1.0.26. A command injection vulnerability exists in the runtime.ddnsStatus DynDNS function exposed via the hostname parameter. According to sources, exploitation could impact confidentiality, integrity, and availability; CVSS vectors indicate netwo...

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

PT-2025-19930 · D Link · D-Link Dir-806A1 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-890L versions up to 100CNb11 D-Link DIR-806A1 versions up to 108B03 Description: A critical issue has been detected, affecting the function sub 175C8 of the file /htdocs/soap.cgi. This issue leads to command injection and can be...

CVE-2024-57234

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclicancelwps function...

CVE-2024-57230

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

CVE-2024-57230

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apclidoenrpinwps function...

CVE-2025-43844

CVE-2025-43844 affects Retrieval-based-Voice-Conversion-WebUI (VITS-based) with versions 2.2.231006 and earlier. The root cause is that input variables (e.g., exp_dir1) are passed into the click_train function and concatenated into a shell command executed on the server, enabling arbitrary comman...

PT-2025-19722 · NetGear · Netgear Rax5

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the iface parameter in the vif disable function. Recommendations: For version 1.0.2.26, consider disabling the vif...