10171 matches found
CVE-2025-22447
CVE-2025-22447 affects RemoteView Agent (Windows) prior to version 8.1.5.2. The root cause is an incorrect access permission (CWE-276) on a specific service, enabling a non-administrative user on the remote PC to run arbitrary OS commands with LocalSystem privileges. The documented remediation is...
CVE-2025-24864
Incorrect access permission of a specific folder issue exists in RemoteView Agent for Windows versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege...
CVE-2025-24864
CVE-2025-24864 affects RemoteView Agent (Windows) prior to v8.1.5.2. Root cause: incorrect access permissions on a specific folder (CWE-276) allowing a non-administrative remote-access user to execute arbitrary OS commands with LocalSystem privileges. Impact: local user on a remote PC gains full ...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
Linux Distros Unpatched Vulnerability : CVE-2023-1350
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function updatejobrun of the file src/update.c of the compone...
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection
Edimax IC-7100 does not properly neutralize requests. An attacker can create specially crafted requests to achieve remote code execution on the device...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
Exploit for OS Command Injection in Ivanti Cloud_Services_Appliance
CVE-2024-8190 unauthenticated Description Combining CVE-...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-1829
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...
CVE-2025-1829 TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...
CVE-2025-1819 Tenda AC7 1200M telnet TendaTelnet os command injection
A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lanip leads to os command injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-1819 Tenda AC7 1200M telnet TendaTelnet os command injection
A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lanip leads to os command injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2025-1819
CVE-2025-1819 affects the Tenda AC7 1200M (firmware 15.03.06.44). The vulnerability is in the TendaTelnet function under /goform/telnet, where improper handling of the lan_ip argument enables an OS command injection that can be triggered remotely. Exploitation has been disclosed publicly per mult...
CVE-2024-53944
An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUIv1.0.1802.10.08P4 and LT21B devices through M7628xUSAxUIv2v1.0.1481.15.02P0. A unauthenticated remote attacker with network access can exploit a command injection vulnerability. The /goform/formJsonAjaxReq...
CVE-2025-27140
WeGIA is a Web manager for charitable institutions. An OS Command Injection vulnerability was discovered in versions prior to 3.2.15 of the WeGIA application, importardump.php endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. The command is basically a comma...