CVE-2026-7833 EFM ipTIME C200 ApplyRestore Endpoint iux_set.cgi sub_408F90 command injection

A weakness has been identified in EFM ipTIME C200 up to 1.092. This vulnerability affects the function sub408F90 of the file /cgi/iuxset.cgi of the component ApplyRestore Endpoint. This manipulation of the argument RestoreFile causes command injection. The attack can be initiated remotely. The...

PT-2026-25946

Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system name set.cgi script that allows attackers to inject arbitrary script code by manipulating the sysName parameter. Attackers can send a crafted POST request with malicious script...

CVE-2022-25343

An issue was discovered on Olivetti d-COLOR MF3555 2XDS000.002.271 devices. The Web Application is affected by Denial of Service. An unauthenticated attacker, who can send POST requests to the /download/set.cgi page by manipulating the failhtmfile variable, is able to cause interruption of the...

Kyocera d-COLOR MF3555 安全漏洞

Kyocera d-COLOR MF3555 is a color multifunction printer from Kyocera Japan.A denial of service vulnerability exists in the firmware version Kyocera d-COLOR MF3555 2XDS000.002.271, which stems from a failure to properly handle incoming error messages and can be exploited by an authenticated attack...

Buffer overflow

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set"...

Belkin N750 Unauthorized Access Vulnerability

Belkin N750 is a wireless router product. The Belkin N750 version 1.10.22 has a security vulnerability in its implementation where an unauthenticated remote user can enable telnet and gain root access without a password by sending an HTTP request to set.cgi...

CVE-2018-1146

A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access...