TP-Link MR3020 命令注入漏洞

TP-Link MR3020 is a wireless router from China's P&L TP-Link. A security vulnerability exists in the TP-Link MR3020 that stems from the discovery of a command injection issue. The vulnerability allows a remote attacker to send a crafted request to a tftp endpoint to execute arbitrary commands...

Crestron Multiple Products Command Injection Vulnerability

Multiple Crestron products are vulnerable to command injection via the filetransfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root...