CVE-2025-34049

An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11X101 Build 1127.190306 and earlier. The router’s web management interface fails to properly sanitize user input in the targetaddr parameter of the formTracert and formPing administrative...

CVE-2025-6562

Certain hybrid DVR models HBF-09KD and HBF-16NK from Hunt Electronic have an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary OS commands and execute them on the device...

CVE-2025-6620

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been rated as critical. Affected by this issue is the function setUpgradeUboot of the file upgrade.so. The manipulation of the argument FileName leads to os command injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-5306

Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through 778...

EUVD-2025-19256

Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through 778...

CVE-2025-5306 Command Injection in Netflow path

Improper Neutralization of Special Elements in the Netflow directory field may allow OS command injection. This issue affects Pandora FMS 774 through 778...

CVE-2025-36529

An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device...

CVE-2025-36529

An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device...

CVE-2025-36529

An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device...

CVE-2025-36529

CVE-2025-36529 affects TB-eye network recorders and TB-eye AHD recorders. The issue is an OS command injection (CWE-78) that can allow an authenticated attacker to execute arbitrary OS commands on the device. Public details indicate multiple TB-eye products are affected; the exact affected versio...

PT-2025-27064 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS versions 774 through 778 Description: The issue is related to the improper neutralization of special elements in the Netflow directory field, which may allow OS command injection. This could potentially lead to the execution of...

Pandora FMS 安全漏洞

Pandora FMS is a monitoring system from Pandora FMS, USA. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization. A security vulnerability exists in Pandora FMS versions 774 to 778, which stems from improper neutralization of special elements of t...

curl: OS Command Injection in scripts/firefox-db2pem.sh via untrusted certificate nicknames

On AI usage: Only for grammar/formatting suggestions/POC code troubleshooting; all vulnerability discovery, POC code creation, and analysis were done manually. Hey folks, I noticed something I think is worth bringing to you-- scripts/firefox-db2pem.sh helper in the curl source uses eval certutil ...

CVE-2025-34049

CVE-2025-34049 affects the OptiLink ONT1GEW GPON router, firmware versions before V2.1.11 X101 Build 1127.190306. The web management interface fails to sanitize the target_addr input in the formTracert and formPing endpoints, enabling OS command injection. An authenticated attacker can run arbitr...

CVE-2025-34049 OptiLink ONT1GEW GPON Remote Code Execution

An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11X101 Build 1127.190306 and earlier. The router’s web management interface fails to properly sanitize user input in the targetaddr parameter of the formTracert and formPing administrative...

CVE-2025-34049 OptiLink ONT1GEW GPON Remote Code Execution

An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11X101 Build 1127.190306 and earlier. The router’s web management interface fails to properly sanitize user input in the targetaddr parameter of the formTracert and formPing administrative...

CVE-2025-6562

Certain hybrid DVR models HBF-09KD and HBF-16NK from Hunt Electronic have an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary OS commands and execute them on the device...

CVE-2025-6562 Hunt Electronic Hybrid DVR - OS Command Injection

Certain hybrid DVR models HBF-09KD and HBF-16NK from Hunt Electronic have an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary OS commands and execute them on the device...

CVE-2025-6562

CVE-2025-6562 affects Hunt Electronic hybrid DVR models HBF-09KD and HBF-16NK. A remote OS command injection vulnerability allows attackers with regular privileges to inject and execute arbitrary OS commands on the device. Base data indicates network-based access with low privileges and no user i...

CVE-2025-6562 Hunt Electronic Hybrid DVR - OS Command Injection

Certain hybrid DVR models HBF-09KD and HBF-16NK from Hunt Electronic have an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary OS commands and execute them on the device...