7 matches found
CVE-2026-46368-OpenWrt-Exploit
OpenWrt luci-app-https-dns-proxy Inyección de Comandos Autenticada CVE-2026-46368 Este repositorio contiene el PoC Prueba de Concepto para una vulnerabilidad crítica de inyección de comandos del sistema operativo en luci-app-https-dns-proxy que resulta en la ejecución arbitraria de comandos como...
CVE-2026-26899
An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...
CVE-2026-26899
An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...
CVE-2026-26899
CVE-2026-26899 affects the luci-app-https-dns-proxy package on OpenWrt (versions prior to 2026-01-17). The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy fails to sanitize the name parameter, allowing authenticated users to execute arbitrary shell commands via shell metacharacte...
EUVD-2026-67101
An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...
PT-2026-82517
An issue was discovered in luci-app-https-dns-proxy on OpenWrt PR 15 2026-01-17. The setInitAction function in /usr/libexec/rpcd/luci.https-dns-proxy allows authenticated users to execute arbitrary shell commands via shell metacharacters in the name parameter...
