EUVD-2021-33132

Malicious code in bioql PyPI...

Command injection

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl0.0maclist parameter...

CVE-2021-46456

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl0.0maclist parameter...

CVE-2021-46456: Improper Neutralization of Special Elements used in a Command

D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl0.0maclist parameter...

PT-2022-1550

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the SetWLanACLSettings function. This vulnerability allows attackers to execute arbitrary commands via the wl0.0 maclist parameter. The...

CVE-2019-9120

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...

PT-2019-19374

Name of the Vulnerable Software and Affected Versions Motorola C1 version 1.01 Motorola M2 version 1.07 Description A Command Injection issue allows a remote attacker to execute arbitrary code and gain a root shell. This occurs when the HNAP API function triggers a call to the system function wit...

CVE-2019-9120: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a...