CVE-2025-65008: Improper Neutralization of Special Elements used in an OS Command

In WODESYS WD-R608U router also known as WDR122B V2.0 and WDR28 due to lack of validation in the langGet parameter in the adm.cgi endpoint, the malicious attacker can execute system shell commands. The vendor was notified early about this vulnerability, but didn't respond with the details of...

GLSA-201406-25 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-25 Asterisk: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Asterisk. Please review the CVE identifiers below for details. Impact : A remote attacker that gains access to a privileged Asterisk...