647 matches found
CVE-2026-84860
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security gates DWR endpoints by URL path pattern, but DWR itself dispatches method calls based on the POST body parameters c0-scriptName and c0-methodName. The crossDomainSessionSecurity setting in web.xml is s...
CVE-2026-84860 Scada-LTS DWR Authorization Bypass - Systemic
ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security gates DWR endpoints by URL path pattern, but DWR itself dispatches method calls based on the POST body parameters c0-scriptName and c0-methodName. The crossDomainSessionSecurity setting in web.xml is s...
CVE-2025-22968
CVE-2025-22968 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π½Π΅Π°ΡΡΠ΅Π½ΡΠΈΡΠΈΡΠΈΡΠΎΠ²Π°Π½Π½ΠΎΠ³ΠΎ Π΄ΠΎΡΡΡΠΏΠ° Π² ΠΏΡΠΎΠ³ΡΠ°ΠΌΠΌΠ½ΠΎΠΌ ΠΎΠ±Π΅ΡΠΏΠ΅ΡΠ΅Π½ΠΈΠΈ D-Link DWR-M972V Π²Π΅ΡΡΠΈΠΈ 1.05SSG ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ ΠΠ΅Π°ΡΡΠ΅Π½ΡΠΈΡΠΈΡΠΈΡΠΎΠ²Π°Π½Π½ΡΠΉ Π΄ΠΎΡΡΡΠΏ Π² ΠΊΠΎΠ½ΡΠΈΠ³ΡΡΠ°ΡΠΈΠΈ ΠΏΠΎ ΡΠΌΠΎΠ»ΡΠ°Π½ΠΈΡ D-Link DWR-M972V Π²Π΅ΡΡΠΈΡ ΠΠ 1.05SSG ΠΏΠΎΠ·Π²ΠΎΠ»ΡΠ΅Ρ Π°Π½ΠΎΠ½ΠΈΠΌΠ½ΠΎΠΌΡ Π·Π»ΠΎΡΠΌΡΡΠ»Π΅Π½Π½ΠΈΠΊΡ ΠΏΠΎΠ»ΡΡΠΈΡΡ Π΄ΠΎΡΡΡΠΏ ΠΊ ΠΌΠ°ΡΡΡΡΡΠΈΠ·Π°ΡΠΎΡΡ ΠΈ Π·Π°Π³ΡΡΠ·ΠΈΡΡ...
CVE-2026-90706
A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be...
CVE-2026-90705
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has...
CVE-2026-90706
D-Link DWR-M921 firmware version 1.1.52 is affected by an OS command injection in the formWsc function of the /boafrm/formWsc file. The vulnerability is triggered by manipulating the targetAPSsid argument, allowing a remote, authenticated attacker (high privileges required) to execute arbitrary c...
CVE-2026-90706 D-Link DWR-M921 formWsc os command injection
A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be...
EUVD-2026-77362
A vulnerability was identified in D-Link DWR-M921 1.1.52. This impacts the function formWsc of the file /boafrm/formWsc. The manipulation of the argument targetAPSsid leads to os command injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be...
CVE-2026-90704
A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is possible. The exploit has been made publi...
CVE-2026-90703
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2026-90702
A flaw has been found in D-Link DWR-M921 1.1.52. Impacted is the function system of the file /boafrm/formDiskFormat. This manipulation of the argument partition causes os command injection. The attack may be initiated remotely. The exploit has been published and may be used...
EUVD-2026-77356
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has...
CVE-2026-90705
A OS command injection vulnerability was identified in D-Link DWR-M921 firmware version 1.1.52 . The flaw resides in the formsysCmd function of the file /boafrm/formsysCmd within the Boa Dispatch Table component. Manipulating the sysCmd argument allows a remote attacker with high privileges to in...
CVE-2026-90705 D-Link DWR-M921 Boa Dispatch Table formsysCmd os command injection
A vulnerability was determined in D-Link DWR-M921 1.1.52. This affects the function formsysCmd of the file /boafrm/formsysCmd of the component Boa Dispatch Table. Executing a manipulation of the argument sysCmd can lead to os command injection. The attack can be executed remotely. The exploit has...
EUVD-2026-77354
A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is possible. The exploit has been made publi...
CVE-2026-90704 D-Link DWR-M921 formDiskPartition system command injection
A vulnerability was found in D-Link DWR-M921 1.1.52. The impacted element is the function system of the file /boafrm/formDiskPartition. Performing a manipulation of the argument devicename results in command injection. Remote exploitation of the attack is possible. The exploit has been made publi...
CVE-2026-90704
A command injection vulnerability exists in D-Link DWR-M921 version 1.1.52 . The flaw resides in the system function within /boafrm/formDiskPartition, where manipulation of the devicename argument allows arbitrary command execution. The attack vector is network-based with high privileges required...
CVE-2026-90703
CVE-2026-90703 is an OS command injection vulnerability in the D-Link DWR-M921 (firmware 1.1.52 ). The vulnerable element is the system function within the /boafrm/formDiskCreateShare handler; an attacker can manipulate the folderpath argument to inject arbitrary OS commands. The attack is remote...
EUVD-2026-77345
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2026-90703 D-Link DWR-M921 formDiskCreateShare system os command injection
A vulnerability has been found in D-Link DWR-M921 1.1.52. The affected element is the function system of the file /boafrm/formDiskCreateShare. Such manipulation of the argument folderpath leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the...