Flannel Network Infrastructure Arbitrary Command Execution

The vulnerability of the Flannel container’s network infrastructure is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Tenda FH451 Form Safe Email Filter Code Execution

The vulnerability of the formSafeEmailFilter function in the Tenda FH451 router software lies in the lack of data cleaning measures at the management level when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

D-Link DIR-880L Router Sub_16570 Function Arbitrary Command Execution

The vulnerability of the sub16570 function in the /htdocs/ssdpcgi file of the D-Link DIR-880 router’s microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

iControl REST Command Injection

The vulnerability of the iControl REST component of the access control and remote authentication solution for BIG-IP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands remotely...

EDIMAX BR-6478AC Privilege Escalation Command Execution

The vulnerability of the web interface of the microprogrammed software router EDIMAX BR-6478AC is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands...

NuPoint Unified Messaging Arbitrary Command Execution

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially created data...

Instant AOS-8/AOS-10 CLI RCE

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

monitoring adaptive configuration instance_create Code Execution

The vulnerability of the instancecreate function in the monitoring and adaptive configuration of system devices related to tuned systems lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary code with root...