CVE-2025-15081 JD Cloud BE6500 jdcapi sub_4780 command injection

A vulnerability has been found in JD Cloud BE6500 4.4.1.r4308. This issue affects the function sub4780 of the file /jdcapi. Such manipulation of the argument ddnsname leads to command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

CVE-2025-15081

CVE-2025-15081 affects JD Cloud BE6500 v4.4.1.r4308. The vulnerability is in function sub_4780 of /jdcapi, where manipulation of the ddns_name argument enables command injection. The attack may be performed remotely and the exploit has been publicly disclosed. Red Hat/NTspecific advisories note n...

CVE-2022-27002: Improper Neutralization of Special Elements used in a Command

Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddnsname, ddnspwd, hddns、ddnshost parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...