Linksys E5600 runtime InternetConnection Command Execution

The vulnerability of the runtime.InternetConnection function in Linksys E5600 router microprogramming software is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-25504

Name of the Vulnerable Software and Affected Versions Apache Spark versions prior to 3.5.7 and 4.0.1 Description Apache Spark 3.5.4 and earlier versions contain a code execution issue in the Spark History Web UI. This is due to overly permissive Jackson deserialization of event log data. An...

AZL-62282 CVE-2025-48938 affecting package gh for versions less than 2.62.0-9

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URL...

TOTOLINK CA600-PoE Router Command Execution

The vulnerability of the msgprocess function in TOTOLINK CA600-PoE router microprogramming software is related to the lack of measures taken at the control level during the processing of the URL parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

TOTOLINK CA600-PoE Router Arbitrary Command Execution

The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CA600-PoE router’s software lies in the lack of measures taken at the control level during the processing of the url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sendin...

TOTOLINK CA600-PoE Router Arbitrary Command Execution

The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CA600-PoE router’s software lies in the lack of measures taken at the control level during the processing of the magicid parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

TOTOLINK CA300-PoE Router Command Execution

The vulnerability of the msgprocess function in TOTOLINK CA300-PoE router microprogramming systems is related to the lack of measures taken at the control level during the processing of the Port parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

TOTOLINK CA300-PoE Router Command Execution

The vulnerability of the msgprocess function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken at the control level during the processing of the URL parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

TOTOLINK CA300-PoE Router Arbitrary Command Execution

The vulnerability of the recvUpgradeNewFw function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level when processing the fwUrl parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

TOTOLINK CP900 Router Arbitrary Command Execution

The vulnerability of the setUpgradeUboot function in TOTOLINK CP900 router microprogramming software is related to the lack of measures to sanitize input data during the processing of the FileName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

TOTOLINK CP900 Router Arbitrary Command Execution

The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CP900 router’s software lies in the lack of measures to sanitize input data when processing parameters like url and magicid. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending...

TOTOLINK CP900 Router Command Execution

The vulnerability of the setApRebootScheCfg function in TOTOLINK CP900 router microprogramming software is related to the lack of measures to clean input data during the processing of the hour and minute parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

TOTOLINK CA600-PoE Router Arbitrary Command Execution

The vulnerability of the recvUpgradeNewFw function in TOTOLINK CA600-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level when processing the fwUrl parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

TOTOLINK CA600-PoE Router Arbitrary Command Execution

The vulnerability of the setUpgradeFW function in TOTOLINK CA600-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level when processing the FileName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

TOTOLINK CA300-PoE Router Arbitrary Command Execution

The vulnerability of the CloudSrvUserdataVersionCheck function in TOTOLINK CA300-PoE router’s software lies in the lack of measures taken at the control level during the processing of the url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sendin...

TOTOLink A950RG Router Arbitrary Command Execution

The vulnerability of the setNoticeCfg function in the TOTOLink A950RG router’s microprogramming software lies in the lack of measures taken to clean up data at the control level when processing the IpTo parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

TOTOLINK CP900 Router Command Execution

The vulnerability of the setUploadUserData function in TOTOLINK CP900 router microprogramming software is related to the lack of measures to sanitize input data during the processing of the FileName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

PT-2025-23356 · Undefined · Undefined

CVE-2022-46739 - Apache Struts Remote Command Execution Vulnerability CVE ID : CVE-2022-46739 Published : May 28, 2025, 7:15 p.m. | 2 hours, 15 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is Unused Severity: 0.0 |...

SINEMA Remote Connect Edge Client LPE9403 Arbitrary Command Execution

The vulnerability of the SINEMA Remote Connect Edge Client microprogramming software for Siemens Scalance LPE9403 industrial switches in remote connection mode is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability can allow an attacker to...

Wavlink WL-WN579A3 Router Arbitrary Command Execution

The vulnerability of the /cgi-bin/adm.cgi file in the microprogramming software for Wavlink WL-WN579A3 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...