PT-2026-102399

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description A command injection issue exists that allows remote attackers to execute arbitrary commands. The flaw is located in the /api/ZRQos/set online client endpoint, where improper handling of the ip...

PT-2026-102400

Name of the Vulnerable Software and Affected Versions Ziroom ZHOME A0101 version 1.0.1.0 Description Remote command injection is possible due to improper processing of the /api/ZRQos/set online client endpoint. An attacker can exploit this by manipulating the mac argument to execute arbitrary...

CVE-2021-25812

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/setonlineclient...

CVE-2021-25812

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/setonlineclient...

Command injection

Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/setonlineclient...

PT-2021-16802

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 version 1.01 Description A command injection issue exists, allowing for potential exploitation via the ip parameter in a POST request to the "/api/ZRQos/set online client" API endpoint. Recommendations For version...