TOTOLINK A7100RU Router Command Execution

The vulnerability of the setWanCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A7100RU router’s software is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

Netgear RAX5 Router Arbitrary Command Execution

The vulnerability of the apclidoenrpbcwps function in Netgear RAX5 router’s built-in software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Microsoft SharePoint Server Code Execution

The vulnerability of the Microsoft SharePoint Server software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Microsoft SharePoint Server Code Execution

The vulnerability of the Microsoft SharePoint Server software is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Atos Unify OpenScape 4000 Command Execution

The vulnerability of Atos Unify OpenScape 4000, a hybrid communication platform, is related to insufficient cleaning of input data during the processing of dtb format files. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...

Snowflake Golang Driver Code Execution

The vulnerability of the Snowflake Golang driver for working with the cloud-based data processing and storage platform involves the absence of measures to clean incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ArubaOS Command Line Arbitrary Command Execution

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PowerScale OneFS Command Execution Sensitive Information DoS

The vulnerability of the PowerScale OneFS operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands, expose protected information, or cause service failures...

Sonatype Nexus Repository Manager Code Execution

The vulnerability of Sonatype Nexus Repository Manager is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

D-link DIR-823G SetNetworkTomographySettings Command Execution

The vulnerability of the SetNetworkTomographySettings function implementation in D-link DIR-823G router microprogramming software is related to insufficient cleaning of input data used in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending...

D-Link DIR810LA1FW102B22 Router Code Execution

The vulnerability of the Pingaddr function in D-Link DIR810LA1FW102B22 microprogrammed router software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code. source-iocs-preserved const=DIR810LA1FW102B2...

mySCADA myPRO Command Injection

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

mySCADA myPRO Command Injection

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TP-Link Tapo C200 Input Validation

The vulnerability of TP-Link Tapo C200 IP camera’s microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to gain full control over the device...

NETGEAR Router Command Injection

The vulnerability of the embedded software of NETGEAR routers such as D3600, D6000, D6100, D6220, D6400, D7800, D8500, DGN2200Bv4, DGN2200v4, R6250, R6300v2, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7100LG, R7300, R7900, R7900P, R8000, R8000P, R8300, R8500, WNDR3400v3,...

NETGEAR EX6120 Plugin Command Injection

The vulnerability of the embedded software of NETGEAR EX6120, EX6130, EX7000, EX7500, EX3700, EX3800, RBR850, RBS850, and RBK852 lies in the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DI-7200G Router Arbitrary Command Execution

The vulnerability of the mspinfo.htm file implementation of the D-Link DI-7200G V2.E1 router microprogramming system is related to insufficient cleaning of input data during the processing of the cmd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotel...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

NETGEAR Wi-Fi Router Command Injection

The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...