5 matches found
exploit-CVE-2026-2670
exploit-CVE-2026-2670 CVE-2026-2670 – PoC de Injeção de Comandos no Advantech WISE-6610 Prova de conceito de exploit demonstrando uma vulnerabilidade de injeção de comandos no roteador celular industrial Advantech WISE-6610. A vulnerabilidade existe no endpoint /cgi-bin/luci/admin/openvpnapply e...
Advantech WISE-6610 OS Command Injection Vulnerability
Advantech WISE-6610 is a core gateway device from Advantech, Taiwan, China. The Advantech WISE-6610 suffers from an operating system command injection vulnerability that originates from a misuse of the parameter deletefile in the file /cgi-bin/luci/admin/openvpnapply, which can be exploited by an...
Advantech WISE-6610 操作系统命令注入漏洞
Advantech WISE-6610 is a core gateway device from Advantech, Taiwan, China. The Advantech WISE-6610 suffers from an operating system command injection vulnerability that originates from a misuse of the parameter deletefile in the file /cgi-bin/luci/admin/openvpnapply, which can be exploited by an...
CVE-2023-34835
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScript code via a vulnerable deletefile parameter...
Monstra CMS Arbitrary File Deletion Vulnerability
Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A security vulnerability exists in the admin/index.php file in Monstra CMS version 3.0.4. An attacker can...