Lucene search
K

663 matches found

Positive Technologies
Positive Technologies
added 2026/03/29 12:0 a.m.1 views

PT-2026-28743

Name of the Vulnerable Software and Affected Versions BichitroGan ISP Billing Software version 2025.3.20 Description A flaw exists in BichitroGan ISP Billing Software that allows for improper control of resource identifiers. The issue is located within an unknown function of the file ‘/?...

5.3CVSS5.7AI score0.00226EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.18 views

CVE-2021-27148

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP...

9.8CVSS7.2AI score0.23633EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.7 views

CVE-2021-27164

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisadmin credentials for an ISP...

9.8CVSS7.2AI score0.23633EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.3 views

CVE-2021-27157

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 888888 credentials for an ISP...

9.8CVSS7.2AI score0.14538EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.6 views

CVE-2021-27160

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 888888 credentials for an ISP...

9.8CVSS7.2AI score0.17138EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/03/27 2:26 p.m.3 views

CVE-2021-27159

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / 888888 credentials for an ISP...

9.8CVSS7.2AI score0.23633EPSS
Exploits1References1
Snyk
Snyk
added 2026/02/25 7:29 p.m.2 views

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rendering of RSE metadata in the WebUI. An attacker can execute arbitrary JavaScript in the users' context by injecting malicious scripts into the City, CountryName, or ISP fields, which are then stored...

8.2CVSS5.9AI score0.00287EPSS
Exploits1References2
OSV
OSV
added 2026/02/20 4:22 p.m.1 views

CVE-2026-2847

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument IspName results in os command injection. The attack can be launched remotely. The explo...

7.2CVSS5.7AI score0.09229EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/02/20 3:32 p.m.24 views

CVE-2026-2847 UTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument IspName results in os command injection. The attack can be launched remotely. The explo...

8.6CVSS0.09229EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/02/20 3:32 p.m.4 views

CVE-2026-2847

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument IspName results in os command injection. The attack can be launched remotely. The explo...

8.6CVSS6.9AI score0.09229EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/20 3:32 p.m.3 views

CVE-2026-2847 UTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection

A vulnerability was detected in UTT HiPER 520 1.7.7-160105. Affected is the function sub44EFB4 of the file /goform/formReleaseConnect of the component Web Management Interface. The manipulation of the argument IspName results in os command injection. The attack can be launched remotely. The explo...

8.6CVSS6.9AI score0.09229EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.5 views

UTT HiPER 520 操作系统命令注入漏洞

UTT HiPER 520 is a high-performance router produced by UTT Corporation. The version 1.7.7-160105 of UTT HiPER 520 contains a vulnerability related to operating system command injection. This vulnerability stems from an incorrect operation of the parameter IspName in the function sub44EFB4 of the...

8.6CVSS7.1AI score0.09229EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/02/09 1:33 a.m.2 views

CVE-2026-2118

A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument IspName can lead to command injection. The attack can be launched remotely. The...

8.6CVSS6.8AI score0.04239EPSS
Exploits1References1
OSV
OSV
added 2026/02/08 1:16 a.m.1 views

CVE-2026-2118

A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument IspName can lead to command injection. The attack can be launched remotely. The...

7.2CVSS5.6AI score0.04239EPSS
Exploits1References5
NVD
NVD
added 2026/02/08 1:16 a.m.4 views

CVE-2026-2118

A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument IspName can lead to command injection. The attack can be launched remotely. The...

8.6CVSS0.04239EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/02/08 12:2 a.m.3 views

CVE-2026-2118 UTT HiPER 810 rehttpd formReleaseConnect sub_4407D4 command injection

A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument IspName can lead to command injection. The attack can be launched remotely. The...

8.6CVSS5.4AI score0.04239EPSS
Exploits1References5
EUVD
EUVD
added 2026/02/08 12:2 a.m.4 views

EUVD-2026-5827

A vulnerability was determined in UTT HiPER 810 1.7.4-141218. The impacted element is the function sub4407D4 of the file /goform/formReleaseConnect of the component rehttpd. Executing a manipulation of the argument IspName can lead to command injection. The attack can be launched remotely. The...

8.6CVSS6.8AI score0.04239EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/02/08 12:0 a.m.2 views

UTT HiPER 810 命令注入漏洞

UTT HiPER 810 is an intelligent broadband router developed by UTT Corporation. The version 1.7.4-141218 of UTT HiPER 810 contains a command injection vulnerability. This vulnerability stems from incorrect handling of the parameter IspName in the function sub4407D4 within the rehttpd component’s...

8.6CVSS7.1AI score0.04239EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/09 12:43 p.m.5 views

CVE-2005-1639

SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the 1 username, 2 password, or 3 domain fields...

7.5CVSS8.8AI score0.01316EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:29 a.m.8 views

CVE-2021-27161

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234 credentials for an ISP...

9.8CVSS7.2AI score0.17138EPSS
Exploits1References1
Rows per page
Query Builder