CVE-2023-39780

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /startapply.htm qosbwrulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the...

CVE-2023-39780

On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /startapply.htm qosbwrulelist parameter. NOTE: for the similar “token-generated module” issue, see CVE-2023-41345; for the similar “token-refresh module” issue, see CVE-2023-41346; for the...

CVE-2023-4873

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is...

CVE-2023-4873

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is...

Command injection

A vulnerability, which was classified as critical, was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection...

CVE-2023-4873 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is...

CVE-2023-4873 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906. Affected is an unknown function of the file /importexport.php. The manipulation of the argument sql leads to os command injection. It is...

PT-2023-30927 · Byzoro +1 · Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform +1

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230906 Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform versions up to 20230906 Description: A critical iss...

ASUS RT-AC86U OS Command Injection Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from Asus China. The ASUS RT-AC86U suffers from an operating system command injection vulnerability that stems from insufficient filtering of special characters without using the traditional statistics feature of the traffic analyzer...

CVE-2023-41149

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running...

CVE-2023-41149

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability. If this vulnerability is exploited, an attacker who can access the product may execute an arbitrary OS command on the server where the product is running...

CVE-2023-41149

F-RevoCRM 7.3.7 and 7.3.8 contain an OS command injection vulnerability (CVE-2023-41149) that could allow an attacker with access to execute arbitrary OS commands on the server. The issue is confirmed across multiple sources (NVD entry and vendor/standard advisories), with high impact to confiden...

TP-LINK Archer C7 OS Command Injection Vulnerability

The TP-LINK Archer C7 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C7JPV2230602, and firmware versions prior to Archer C55JPV1230506, which stems from a vulnerability that could allow a network-adjacent authenticated...

TP-LINK Archer AX6000 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer AX6000JPV11.3.0 Build 20221208, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating syste...

TP-LINK Archer C1200 OS Command Injection Vulnerability

The TP-LINK Archer C1200 is a wireless router from China P&L TP-LINK. A security vulnerability exists in firmware versions prior to TP-LINK Archer C1200JPV2230508, Archer C9JPV3230508, and Archer C9JPV3230508, which stems from a vulnerability that could allow a network-adjacent authenticated...

TP-LINK Archer C5400 OS Command Injection Vulnerability

The TP-LINK Archer is a series of routers from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK Archer C5400 V2230506, which stems from a vulnerability that allows network-adjacent authenticated attackers to execute arbitrary operating system commands...

CVE-2023-3375

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection.This issue affects Bookreen: before 3.0.0...

CVE-2023-3375

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This issue affects Bookreen: before 3.0.0...

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection.This issue affects Bookreen: before 3.0.0...

CVE-2023-3375

CVE-2023-3375 concerns an OS command injection in Unisign Bookreen caused by an Unrestricted Upload of a File with a Dangerous Type. Affected product/version: Unisign Bookreen prior to 3.0.0. The underlying issue is the ability to upload files of dangerous type, enabling command execution on the ...