CVE-2025-57457

Inyección de Comandos del Sistema Operativo en el Teléfono IP CURO UC300 Una vulnerabilidad de Inyección de Comandos del Sistema Operativo en el panel de administración de Curo UC300 5.42.1.7.1.63R1 permite a atacantes locales inyectar comandos arbitrarios del sistema operativo a través del...

Malicious code in css-gap-decorations-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8126656cc344a4f632b8ddf5a23683fc92ac22798bb67e1aed6bca73ac82d7b6 The package is published as a CSS polyfill but ships no polyfill functionality. On require, thunderboltRegistry.js uses childprocess.execSync to run...

CVE-2026-35506

ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of pingipaddr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed...

PT-2026-40596

ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping ip addr parameter. If processing a crafted request sent by a logged-in user, an arbitrary OS command may be executed...

CVE-2025-57457: Improper Neutralization of Special Elements used in an OS Command

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

CVE-2025-57457

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

PT-2024-31411

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical vulnerability has been found in Ruijie RG-UAC, affecting unknown code of the file /view/IPV6/ipv6Addr/ip addr edit commit.php. The manipulation of the argument text ip addr/orgprelen/orgname...

PT-2024-31401

Name of the Vulnerable Software and Affected Versions Ruijie RG-UAC up to 20240428 Description A critical vulnerability was found in Ruijie RG-UAC, affecting an unknown part of the file /view/IPV6/ipv6Addr/ip addr add commit.php. The manipulation of the argument prelen/ethname leads to os command...

PT-2019-13157

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions prior to 2.05B11 Description An issue was discovered in the firmware, where a command injection exists in the "apply.cgi" endpoint, specifically in the ip addr variable. This issue is exploitable with authenticatio...