3518 matches found
CVE-2025-23437
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nordtramper ntp-header-images header-images-rotator allows Reflected XSS.This issue affects ntp-header-images: from n/a through = 1.2...
CVE-2024-39351
A vulnerability regarding improper neutralization of special elements used in an OS command 'OS Command Injection' is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models wi...
PT-2026-1842
Name of the Vulnerable Software and Affected Versions Network Device Firmware affected versions not specified Description This issue enables authenticated attackers to execute commands through the NTP-configuration of the device. The vulnerability involves a command injection within the NTP...
CVE-2020-36910
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizardsystem.cgi pages. Attackers can exploit the 'NTPServerIP' parameter with default credentials to execute arbitrary shell commands as root...
CVE-2020-36910 Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizardsystem.cgi pages. Attackers can exploit the 'NTPServerIP' parameter with default credentials to execute arbitrary shell commands as root...
CVE-2020-36910 Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizardsystem.cgi pages. Attackers can exploit the 'NTPServerIP' parameter with default credentials to execute arbitrary shell commands as root...
PT-2026-1445
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard system.cgi pages. Attackers can exploit the 'NTP Server IP' parameter with default credentials to execute arbitrary shell commands as root...
CVE-2025-55901
TOTOLINK A3300R V17.0.0cu.596B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the hosttime parameter...
PT-2025-51256
Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version V17.0.0cu.596 B20250515 Description The TOTOLINK A3300R router firmware contains a command injection flaw in the NTPSyncWithHost function. The issue is triggered through the host time parameter. This allows for potentia...
PT-2025-47841
Name of the Vulnerable Software and Affected Versions D-Link DIR-822K version 1.00 Description A buffer overflow issue exists in the function sub 455524 of the file /boafrm/formNtp. Manipulation of the submit-url argument can trigger this issue, potentially allowing for remote exploitation. The...
D-Link DIR-822K 安全漏洞
The D-Link DIR-822K is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822K version 1.00, which originates from a misbehavior of the parameter submit-url in the file /boafrm/formNtp, which may result in a buffer overflow...
EUVD-2015-7604
Malware in sbrugna...
EUVD-2017-15520
Malware in sbrugna...
EUVD-2017-15519
Malware in sbrugna...
EUVD-2017-15512
Malware in sbrugna...
EUVD-2017-15516
Malware in sbrugna...
EUVD-2015-7594
Malware in sbrugna...
EUVD-2016-3595
Malware in sbrugna...