18549 matches found
CVE-2022-46552
D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...
CVE-2022-43946
Multiple vulnerabilities including an incorrect permission assignment for critical resource CWE-732 vulnerability and a time-of-check time-of-use TOCTOU race condition CWE-367 vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute...
CVE-2022-25441
Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the vlanid parameter in the SetIPTVCfg function...
CVE-2022-25438
Tenda AC9 v15.03.2.21 was discovered to contain a remote command execution RCE vulnerability via the SetIPTVCfg function...
CVE-2022-25390
DCN Firewall DCME-520 was discovered to contain a remote command execution RCE vulnerability via the host parameter in the file /system/tool/ping.php...
CVE-2022-24630
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh POST request with an sshcommand field that is executed...
Totolink A3002R Router Arbitrary Command Execution
The vulnerability of FUN00459fdc in the Totolink A3002R router’s microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
TOTOLINK A3002RH Router setUnloadUserData Command Execution
The vulnerability of the setUploadUserData function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3002RH router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in operating systems commands. Exploiting this vulnerability can allow a...
D-Link DIR-600L Wake On LAN Command Execution
The vulnerability of the wakeonlan function in D-Link DIR-600L router software lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the host parameter...
D-Link DI-8100 router HTTP Request Handler Command Execution
The vulnerability of the HTTP Request Handler component in D-Link DI-8100 microprogrammed router software is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a malicious actor to send arbitrary commands remotely by sending specially...
Tenda AC9 Telnet Command Execution
The vulnerability of the Telnet component in the Tenda AC9 microprogramming system software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
TOTOLINK A3002RH Router Command Execution
The vulnerability of the CloudACMunualUpdateUserdata function in the /cgi-bin/cstecgi.cgi module of the TOTOLINK A3002RH router’s microprogramming system is related to the failure to eliminate special elements used in operating systems commands. Exploiting this vulnerability can allow a malicious...
SCALANCE W-700 IEEE 802.11ax Industrial Switches Command Execution
The vulnerability of SCALANCE W-700 IEEE 802.11ax industrial switches lies in insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Totolink-A810R setNoticeCfg Command Execution
The vulnerability of the setNoticeCfg function in the Totolink-A810R router microprogramming system exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
TOTOLINK A3002RH Router SetUploadUserData Command Execution
The vulnerability of the setUploadUserData function in the /cgi-bin/cstecgi.cgi file of the TOTOLINK A3002RH router’s microprogramming system is related to the lack of measures taken to neutralize special elements used in operating systems commands. Exploiting this vulnerability can allow a...
CloudACMunualUpdate Arbitrary Command Execution
The vulnerability of the CloudACMunualUpdate function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...
Remote Logging Function Arbitrary Command Execution
The vulnerability of the Remote Logging function in the ctrlX OS operating system exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a special HTTP request...
MagicINFO SWUpdateFileUploader remote command execution
Added: 05/23/2025 CVE: CVE-2025-4632 Background MagicINFO is digital signage software from Samsung. Problem A path traversal, unsafe file upload, and missing authentication vulnerability allows remote, unauthenticated attackers to upload arbitrary files to the server and then execute them using a...
