CVE-2025-7192: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgimain of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed ...

CVE-2024-41369

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\inc.setWifi.php...

CVE-2025-4341

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command...

CVE-2025-4340: Improper Neutralization of Special Elements used in a Command

A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed t...

CVE-2025-4341: Improper Neutralization of Special Elements used in a Command

A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTPST/REMOTEADDR/REMOTEPORT/SERVERID leads to command...

CVE-2024-41366

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\userScripts.php...

CVE-2024-41367

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\api\playlist\appendFileToPlaylist.php...

CVE-2024-41369

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\inc.setWifi.php...

CVE-2024-41364

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\trackEdit.php...

CVE-2024-41368

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\inc.setWlanIpMail.php...

CVE-2024-41366

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\userScripts.php...

CVE-2024-41368

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\inc.setWlanIpMail.php...

CVE-2024-41368

CVE-2024-41368 affects RPi-Jukebox-RFID v2.7.0. The vulnerability is reported as a remote code execution (RCE) via the file path htdocs/inc.setWlanIpMail.php. Documented impact is high confidentiality, integrity, and availability (as per CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a netwo...

CVE-2024-41366

RPi-Jukebox-RFID v2.7.0 is affected by a remote code execution (RCE) vulnerability exploitable via the htdocs\userScripts.php surface. The CVE entry indicates a NETWORK attack vector with no privileges required and no user interaction, yielding a CRITICAL impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N=S/...

CVE-2024-41368: Improper Control of Generation of Code

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\inc.setWlanIpMail.php...

CVE-2024-41368

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\inc.setWlanIpMail.php...

CVE-2024-41369: Improper Control of Generation of Code

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\inc.setWifi.php...

CVE-2024-41361: Improper Control of Generation of Code

RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution RCE vulnerability via htdocs\manageFilesFolders.php...

RPi-Jukebox-RFID 安全漏洞

RPi-Jukebox-RFID is a contactless jukebox for the Raspberry Pi from the individual developer Micz Flor in Germany. It plays audio files, playlists, podcasts, web streams and spotify triggered by RFID cards. A security vulnerability exists in RPi-Jukebox-RFID version v2.7.0, which originates from...

CVE-2024-41369

CVE-2024-41369 affects RPi-Jukebox-RFID v2.7.0, with a remote code execution (RCE) vulnerability exploitable via htdocs\inc.setWifi.php. Connected sources (NVD/Red Hat/CVE records) confirm the RCE via that PHP file, highlighting high impact (C/H/I/A) and network attack vector, with no exploitatio...