EUVD-2023-30866

Malicious code in bioql PyPI...

CVE-2023-27078

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

Command injection

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

PT-2023-1973 · Tp Link · Tp-Link Mr3020

Name of the Vulnerable Software and Affected Versions: TP-Link MR3020 version 1 150921 Description: A command injection issue allows a remote attacker to execute arbitrary commands via a crafted request to the "tftp endpoint". This issue is related to the lack of data cleaning measures at the...

CVE-2023-27078: Improper Neutralization of Special Elements used in a Command

A command injection issue was found in TP-Link MR3020 v.1150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp endpoint...

CVE-2023-27078

CVE-2023-27078 affects TP-Link MR3020 v1_150921, where a vulnerability in the tftp endpoint allows remote command execution due to insufficient input validation. The root cause is a lack of data cleaning at the management level, enabling arbitrary commands to be run by an unauthenticated remote a...