EUVD-2024-54454

Malicious code in bioql PyPI...

NETGEAR RAX5 vif_disable function command injection vulnerability

The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability that stems from the iface parameter in the vifdisable function failing to correctly filter constructed command special characters, commands, and so on. An attacker can exploit this...

CVE-2024-57232

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcliwpsgenpincode function...

CVE-2024-57234

CVE-2024-57234 (NETGEAR RAX5 AX1600 Router) involves a command-injection in the apcli_cancel_wps function triggered by the ifname parameter. The vulnerability affects NETGEAR RAX5 firmware version 1.0.2.26 and can lead to arbitrary command execution with network access, exploitation complexity co...