D-Link DIR-816 - SystemCommand Command Injection

Exploits DIR-816 /goform/SystemCommand after extracting tokenid from /dirlogin.asp. Command output is not always echoed; uses time-based check then best-effort execute. Prefer writing to a reachable path when possible. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-816 SystemCommand RCE ...

D-Link DIR-816 - SystemCommand RCE Detection

Detects DIR-816 A2 command injection by extracting tokenid from /dirlogin.asp then POSTing sleep commands to /goform/SystemCommand and timing the response. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DIR-816 SystemCommand RCE Jul 2019.""" import re import time from kittysploit import from...

VulnCheck KEV: CVE-2025-9528

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly...

VulnCheck KEV: CVE-2020-35714

Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program...

EUVD-2022-39782

Malicious code in bioql PyPI...

Linksys E1700 Router Command Execution

The vulnerability of the systemCommand function in the /goform/systemCommand file of the Linksys E1700 router’s microprogramming system is related to the lack of measures to neutralize special elements during the processing of the command parameter. Exploiting this vulnerability allows a remote...

CVE-2025-9528

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly...

CVE-2025-9528

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly...

CVE-2025-9528 Linksys E1700 systemCommand os command injection

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly...

CVE-2025-9528 Linksys E1700 systemCommand os command injection

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly...

CVE-2025-9528

CVE-2025-9528 affects Linksys E1700 router (version 1.0.0.4.003). The vulnerability targets the function systemCommand in /goform/systemCommand; manipulating the command argument can cause an OS command injection. The attack can be launched remotely, and exploitation has been publicly disclosed. ...

CVE-2025-9528: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly...

Linksys E1700 security vulnerabilities

The Linksys E1700 is a wireless router from Linksys, USA. A security vulnerability exists in Linksys E1700 version 1.0.0.4.003, which stems from an incorrect operation of the parameter command in the file /goform/systemCommand resulting in os command injection...

CVE-2024-46329

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object...

CVE-2016-11021

setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter...

CVE-2024-46329

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object...

CVE-2024-46329

The VONETS VAP11G-300 wireless bridge and repeater (v3.3.23.6.9) is vulnerable to a command injection vulnerability via the SystemCommand object. This flaw allows for the execution of arbitrary commands on the device. As a temporary workaround, it is recommended to disable the SystemCommand objec...

CVE-2024-46329

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object...

CVE-2024-46329: Improper Neutralization of Special Elements used in an OS Command

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain a command injection vulnerability via the SystemCommand object...

Vonets VAP11G-300 security vulnerabilities

Vonets VAP11G-300 is a multi-functional wireless bridge and repeater device from China Houtian Vonets. It is based on the IEEE 802.11n standard and has a wireless rate of up to 300Mbps. A security vulnerability exists in the Vonets VAP11G-300 version 3.3.23.6.9, which originates from a...