Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-51301

Malicious code in bioql PyPI...

7.2CVSS6.9AI score0.03442EPSS
Exploits1References1
OSV
OSV
added 2024/06/25 2:15 p.m.3 views

CVE-2024-21827

A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger...

7.2CVSS6AI score0.00871EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/06/25 2:1 p.m.21 views

CVE-2024-21827

A leftover debug code vulnerability exists in the cliserver debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 20240117 Rel.57421. A specially crafted series of network requests can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger...

7.2CVSS0.00871EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.1 views

The vulnerability of the implementation of the PPTP protocol by the microprogramming-based VPN router TP-Link ER7206 Omada allows a perpetrator to execute arbitrary commands.

The vulnerability of the PPTP protocol implementation in the TP-Link ER7206 Omada VPN router software exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through ports 80/443 remotely...

8.3CVSS7.4AI score0.03442EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.1 views

The vulnerability of the uHTTPd web server, a microprogramming-based software for TP-Link ER7206 Omada VPN routers, allows attackers to execute arbitrary commands.

The vulnerability of the uHTTPd web server of the TP-Link ER7206 Omada wireless router exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through ports 80/443 remotely...

8.3CVSS7.4AI score0.03442EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.2 views

The vulnerability of the WireGuard VPN software component of the TP-Link ER7206 Omada VPN router allows a hacker to execute arbitrary commands.

The vulnerability of the WireGuard VPN component of the TP-Link ER7206 Omada VPN router exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through port 80/443 remotely...

8.3CVSS7.4AI score0.03442EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.3 views

The vulnerability of the PPTP-client of the microprogramming software-based VPN router TP-Link ER7206 Omada allows a hacker to execute arbitrary commands.

The vulnerability of the PPTP-client of the microprogramming-based VPN router TP-Link ER7206 Omada exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands through port 80/44...

8.3CVSS7.4AI score0.03442EPSS
Exploits1References3
OSV
OSV
added 2024/02/06 5:15 p.m.2 views

CVE-2023-47209

A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to...

7.2CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2024/02/06 5:15 p.m.1 views

CVE-2023-47167

A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to...

7.2CVSS5.9AI score0.03442EPSS
Exploits1References2
OSV
OSV
added 2024/02/06 5:15 p.m.3 views

CVE-2023-47617

A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP reques...

7.2CVSS5.9AI score0.03442EPSS
Exploits1References2
OSV
OSV
added 2024/02/06 5:15 p.m.3 views

CVE-2023-36498

A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTTP request to...

7.2CVSS5.9AI score0.03442EPSS
Exploits1References2
OSV
OSV
added 2024/02/06 5:15 p.m.2 views

CVE-2023-43482

A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this...

7.2CVSS6AI score
Exploits0References2
Rows per page
Query Builder