Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

189 matches found

NVD
NVD•added 2022/05/10 2:15 p.m.•35 views

CVE-2022-28906

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...

10CVSS0.02877EPSS
SaveExploits2References1
Prion
Prion•added 2022/05/10 2:15 p.m.•30 views

Command injection

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...

10CVSS9.7AI score0.02877EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist•added 2022/05/10 1:16 p.m.•41 views

CVE-2022-28906

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...

10AI score0.02877EPSS
SaveExploits2References1
CVE
CVE•added 2022/05/10 1:16 p.m.•137 views

CVE-2022-28906

Summary: CVE-2022-28906 affects TOTOLink N600R routers (V5.3c.7159_B20190425). A command-injection vulnerability exists in the /setting/setLanguageCfg API endpoint, exploitable via the langtype parameter. The issue allows an attacker to potentially execute arbitrary commands on the device, with n...

10CVSS9.8AI score0.02877EPSS
SaveIn wildExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2022/05/10 12:00 a.m.•2 views

CVE-2022-28906: Improper Neutralization of Special Elements used in an OS Command

TOTOLink N600R V5.3c.7159B20190425 was discovered to contain a command injection vulnerability via the langtype parameter in /setting/setLanguageCfg...

10CVSS8.2AI score0.02877EPSS
SaveExploits2References2
OSV
OSV•added 2022/03/15 10:15 p.m.•14 views

CVE-2022-26206

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langTy...

9.8CVSS7.5AI score0.02218EPSS
SaveExploits1References1
attackerkb
attackerkb•added 2022/03/15 10:15 p.m.•5 views

CVE-2022-26206

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langTy...

9.8CVSS6.1AI score0.02218EPSS
SaveExploits1References2
Prion
Prion•added 2022/03/15 10:15 p.m.•28 views

Command injection

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langTy...

7.5CVSS9.9AI score0.02218EPSS
SaveExploits1References1Affected Software6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2022/03/15 12:00 a.m.•2 views

CVE-2022-26206: Improper Neutralization of Special Elements used in an OS Command

Totolink A830R V5.9c.4729B20191112, A3100R V4.1.2cu.5050B20200504, A950RG V4.1.2cu.5161B20200903, A800R V4.1.2cu.5137B20200730, A3000RU V5.9c.5185B20201128, and A810R V4.1.2cu.5182B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langTy...

9.8CVSS8.5AI score0.02218EPSS
SaveExploits1References2
Rows per page
Query Builder