CVE-2025-34152

⚠️ CVE-2025-34152 – Shenzhen Aitemi M300 Wi-Fi リピーター RCE 🚨 概要 Shenzhen Aitemi M300 Wi-Fi リピーターは、認証なしのリモートコード実行（RCE） の影響を受けます。 ログイン不要 デバイスを再起動しない リモートから悪用可能 🛠 影響を受けるバージョン バージョン| ステータス ---|--- 1.0.x| ❌ 脆弱 1.1.x| ❌ 脆弱 1.2.x| ❌ 脆弱 2.0.x| ⚠️ ベンダーの更新を確認 💡 修正・対策 ベンダーから最新ファームウェアに更新する...

CVE-2026-58457

CVE-2026-58457 - 認証不要のOSコマンドインジェクション in Shenzhen Aitemi M300 Wi-Fi Repeater !WARNING このコードは教育および研究目的でのみ現状のまま提供されます。 本PoCを本番システム、共有環境、または無許可のターゲットに対して使用しないでください。 このコードの実行またはホスティングは、誤用された場合にウイルス対策検出、セキュリティ監視アラート、または法的結果を引き起こす可能性があります。 著者およびリポジトリ保守者は、本コードに起因するいかなる損害、誤用、または違法行為についても一切の責任を負いません 。...

CVE-2026-19348

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilterconf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command...

CVE-2026-19348 Shenzhen Aitemi M300 Wi-Fi Repeater protocol.csp sprintf command injection

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilterconf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command...

CVE-2026-19348: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?fname=net&opt=smacfilterconf&function=set&act=add&name=test&enable=1. Performing a manipulation of the argument enable/name/mac results in command...

PT-2026-69290

Name of the Vulnerable Software and Affected Versions Shenzhen Aitemi M300 Wi-Fi Repeater version r0-ea7890a Description A remote command injection flaw exists due to improper handling of arguments in the sprintf function within the /protocol.csp?fname=net&opt=smacfilter...

Exploit for CVE-2026-58457

CVE-2026-58457 - Unauthenticated OS Command Injection in Shenz...

CVE-2026-58457

Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...

CVE-2026-58457 Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...

PT-2026-54917

Name of the Vulnerable Software and Affected Versions Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 affected versions not specified Description An unauthenticated OS command injection exists in the commuos web backend. Network-adjacent attackers can execute arbitrary shell commands by...

CVE-2026-58457: Improper Neutralization of Special Elements used in an OS Command

Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilterconf handler in the commuos web backend. Attackers...

📄 Shenzhen Aitemi M300 Wi-Fi Repeater Remote Code Execution

Shenzhen Aitemi M300 Wi-Fi Repeater unauthenticated proof of concept remote code execution exploit that leverages the time parameter in protocol.csp. ============================================================================================================================================= | Tit...

Shenzhen Aitemi M300 Wi-Fi Repeater – Unauthenticated Remote Command Execution via `time` Parameter

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike othe...

EUVD-2025-23537

Malicious code in bioql PyPI...

EUVD-2025-23926

Malicious code in bioql PyPI...

EUVD-2025-23923

Malicious code in bioql PyPI...

EUVD-2025-23925

Malicious code in bioql PyPI...

Exploit for CVE-2025-34152

⚠️ CVE-2025-34152 – Shenzhen Aitemi M300 Wi-Fi Repeater RCE...

📄 Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated Remote Code Execution

This Metasploit module exploits an unauthenticated remote command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02. The vulnerability lies in the time parameter of the time configuration endpoint, which is passed unsanitized to a shell command executed via th...

CVE-2025-34150

The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system commands with root privileges...