Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/02/10 1:23 p.m.•16 views

CVE-2026-2227

A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin. Performing a manipulation of the argument AdminID results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. This...

7.2CVSS5.4AI score0.06235EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•3 views

CVE-2026-2227: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DCS-931L up to 1.13.0. Impacted is the function doSystem of the file /setSystemAdmin. Performing a manipulation of the argument AdminID results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. This...

7.2CVSS5.6AI score0.06235EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•25 views

PT-2026-7014

Name of the Vulnerable Software and Affected Versions UTT 进取 521G version 3.1.1-190816 Description A flaw exists in the doSystem function within the /goform/setSysAdm file. Manipulation of the passwd1 argument can result in command injection. This issue may be exploited remotely. The exploit is...

8.6CVSS5.5AI score0.08861EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/08 12:00 a.m.•2 views

CVE-2026-2182: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in UTT 进取 521G 3.1.1-190816. Affected by this issue is the function doSystem of the file /goform/setSysAdm. Executing a manipulation of the argument passwd1 can lead to command injection. The attack may be launched remotely. The exploit has been made available to th...

8.6CVSS7AI score0.08861EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:34 a.m.•31 views

CVE-2023-27826

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem function...

8.8CVSS7.1AI score0.11771EPSS
SaveExploits2References1
Prion
Prion
•added 2023/04/12 1:15 p.m.•22 views

Command injection

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem function...

6.5CVSS8.7AI score0.11771EPSS
SaveExploits2References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/04/12 12:00 a.m.•10 views

PT-2023-21365 · Seowon Intech · Seowonintech Swc 5100W Wimax Bootloader

Name of the Vulnerable Software and Affected Versions: SeowonIntech SWC 5100W WIMAX Bootloader version 1.18.19.0, HW version 0.0.7.0, and FW versions 1.11.0.1, 1.9.9.4 Description: The issue allows attackers to take over the system with root privilege by abusing the doSystem function, enabling OS...

8.8CVSS7.7AI score0.11771EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/12 12:00 a.m.•4 views

CVE-2023-27826: Improper Neutralization of Special Elements used in an OS Command

SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection. which allows attackers to take over the system with root privilege by abusing doSystem function...

8.8CVSS5.9AI score0.11771EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2023/04/12 12:00 a.m.•9 views

Seowon Intech SWC 5100W WIMAX Bootloader 操作系统命令注入漏洞

Seowon Intech SWC 5100W WIMAX Bootloader is a bootloader from Seowon Intech, Korea. A security vulnerability exists in the Seowon Intech SWC 5100W WIMAX Bootloader version 1.18.19.0, HW 0.0.7.0, FW 1.11.0.1, and 1.9.9.4, which stems from susceptibility to operating system command injection attack...

8.8CVSS8.1AI score0.11771EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/31 12:00 a.m.•2 views

CVE-2022-37129: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...

8.8CVSS8.2AI score0.08325EPSS
SaveExploits1References2
Rows per page
Query Builder