EUVD-2022-29763

Malicious code in bioql PyPI...

CVE-2022-25017

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

CVE-2022-25017

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

Command injection

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

CVE-2022-25017

CVE-2022-25017 affects Hitron CHITA router firmware 7.2.2.0.3b6-CD, with a command-injection vulnerability in the Device/DDNS ddnsUsername field. According to connected sources (CPAI advisory and Red Hat/NVD references), this enables remote code execution via network access, with low privileges r...

CVE-2022-25017

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

CVE-2022-25017: Improper Neutralization of Special Elements used in an OS Command

Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field...

Multiple ARRIS product command injection vulnerabilities

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS, Inc. Multiple ARRIS products are vulnerable to a command injection vulnerability, which stems from the DdnsUserName, DdnsHostName, and DdnsPassword parameters in the ddns function failing to properly filter the construct...

CVE-2022-26992

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows attackers to execute arbitrary commands...

CVE-2022-26992: Improper Neutralization of Special Elements used in an OS Command

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows attackers to execute arbitrary commands...

CVE-2014-3778: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in goform/RgDdns in ARRIS formerly Motorola SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the dns service via the DdnsService parameter, 2 change the...