107 matches found
EUVD-2017-9886
Malware in sbrugna...
EUVD-2017-9940
Malware in sbrugna...
EUVD-2017-9824
Malware in sbrugna...
EUVD-2021-32297
Malicious code in bioql PyPI...
CVE-2017-18795
Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.500.0.50...
NETGEAR Router Command Injection
The vulnerability of NETGEAR’s microprogrammed router models D6220, D8500, R6700, and R6900 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary commands...
CVE-2023-33533
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request...
Command injection
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request...
Netgear Router command injection vulnerability
NETGEAR is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in Netgear Router that stems from the presence of a command injection vulnerability. An attacker can exploit this...
CVE-2023-33533: Improper Neutralization of Special Elements used in a Command
Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26, and R6900 with Firmware Version 1.0.2.26 are vulnerable to Command Injection. If an attacker gains web management privileges, they can inject commands into the post request...
CVE-2023-33533
CVE-2023-33533 affects Netgear D6220 (1.0.0.80), D8500 (1.0.3.60), R6700 (1.0.2.26), and R6900 (1.0.2.26). The root cause is lack of input data sanitization in the firmware’s web management post parameters, enabling command injection. If an attacker has web management privileges, they can inject ...
PT-2023-3101 · NetGear · Netgear R6700 +3
Name of the Vulnerable Software and Affected Versions: Netgear D6220 version 1.0.0.80 Netgear D8500 version 1.0.3.60 Netgear R6700 version 1.0.2.26 Netgear R6900 version 1.0.2.26 Description: The issue is related to the lack of input data sanitization in the firmware of Netgear routers. This allo...
NETGEAR D6220 Command Injection
The vulnerability of NETGEAR D6220 router’s built-in software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2022-37653
Уязвимость микропрограммного обеспечения Wi-Fi роутеров NETGEAR D6220, D7000, D7000v2, R6400v2, R6700v3, R7000, R7100LG, XR300 связана с переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...
NETGEAR Wi-Fi Router Operational Data Protection
The vulnerability of Wi-Fi router microprogramming systems from NETGEAR models D3600, D6000, D6200, and D6220 lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
NETGEAR D6220 Command Injection Vulnerability
NETGEAR D6220 is a wireless modem from Netgear, Inc. A security vulnerability exists in the NETGEAR D6220 device, which stems from the fact that versions prior to 1.0.0.76 are subject to command injection by authenticated users, which can be exploited by attackers for command injection...
CVE-2021-45638
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.74, D8500 before 1.0.3.60, DC112A before 1.0.0.56, R6300v2 before 1.0.4.50, R6400 before 1.0.1.68, R7000 before...
CVE-2021-45638
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0.0.68, D6400 before 1.0.0.102, D7000v2 before 1.0.0.74, D8500 before 1.0.3.60, DC112A before 1.0.0.56, R6300v2 before 1.0.4.50, R6400 before 1.0.1.68, R7000 before...
CVE-2021-45550
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.78, D6100 before 1.0.0.63, D6220 before 1.0.0.52, D6400 before 1.0.0.86, D7800 before 1.0.1.56, D8500 before 1.0.3.44, DGN2200Bv4 before 1.0.0.109, DGN2200v4...