EUVD-2021-27588

Malicious code in bioql PyPI...

CVE-2021-40411: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.13620121102. At 6 the dnsdata-dns2 variable, that has the value of the dns2 parameter provided through the SetLocalLink API, is not validated properly. This would lead to an OS...

PT-2021-7511

Name of the Vulnerable Software and Affected Versions Reolink RLC-410W version 3.0.0.136 20121102 Description The issue exists due to the lack of proper validation of special elements used in an operating system command. This can be exploited by a remote attacker to execute arbitrary commands usi...