CVE-2026-9751

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text...

LB-LINK AC1900 命令注入漏洞

The LB-LINK AC1900 is a wireless router from China Bilink LB-LINK. A command injection vulnerability exists in the LB-LINK AC1900 version 1.0.2, which originates from the file /goform/parameter cmd that can lead to operating system command injection...

CVE-2022-44258: Out-of-bounds Write

TOTOLINK LR350 V9.3.5u.6369B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function...

Trend Micro IWSVA Parameter Command Injection - Ver2

A vulnerability exists in Trend Micro. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

iTrack Easy Authentication Mechanism Bypass Vulnerability

The iTrack Easy is a versatile Bluetooth device. The iTrack Easy fails to implement an authentication mechanism, which can be exploited by a remote attacker to modify the GPS data of a lost device using the 'parametercmd:setothergps' function...