CVE-2019-19945_Test

CVE-2019-19945Test This is the code for the first Proposed CVE 1. Install Docker 2. Build & RUN Server cd Server docker build -t server/cve . docker run -d --name server -p 80:80 server/cve 3. Get Server Container IP Linux sudo docker container inspect server | grep -i IPAddress Windows Powershel...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 是一个命令注入漏洞，允许对 TP-Link Tapo c200 IP 摄像头进行远程代码执行。由于对 uhttpd（设备的主要二进制文件之一）中的用户输入检查不足，该漏洞影响所有早于 1.1.16 Build 211209 Rel. 37726N 的固件版本。完整分析文章可在此处找到。 漏洞利用 pwnTapo.py 这是为在 CryptoParty Madrid 2022 上演示该漏洞而制作的 PoC 的扩展版本。它有两种模式： shell ：在目标上生成一个 root shell rtsp ：通过 RTSP 提供实时视频流的访问...

CVE-2023-43482

CVE-2023-43482 TP-Link ER7206 Omada 千兆 VPN 路由器 uhttpd freeStrategy 命令注入漏洞 摘要 Tp-Link ER7206 Omada 千兆 VPN 路由器 1.3.0 build 20230322 Rel.70591 的访客资源功能中存在一个命令执行漏洞。特制的 HTTP 请求可导致任意命令执行。攻击者可以通过发送身份验证后的 HTTP 请求来触发此漏洞。 已确认存在漏洞的版本 以下版本已经由 Talos 测试或验证存在漏洞，或由供应商确认存在漏洞。 Tp-Link ER7206 Omada 千兆 VPN 路由器 1.3.0...

CVE-2026-63586

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

EUVD-2026-65328

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586 Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface

The web-based management interface uses a modified uhttpd server with CGI shell scripts. The HTTP Basic Authentication username, taken directly from the Authorization header without sanitization, is inserted into a shell command string executed via the system function. By submitting a specially...

CVE-2026-63586

CVE-2026-63586 is a critical (CVSS 3.1: 9.8) unauthenticated remote code execution vulnerability in a web-based management interface that uses a modified uhttpd server with CGI shell scripts. The root cause is a shell injection flaw: the HTTP Basic Authentication username is taken directly from t...

CVE-2022-31937

Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd...

EUVD-2019-9533

Malware in sbrugna...

EUVD-2017-8128

Malware in sbrugna...

EUVD-2022-39882

Malicious code in bioql PyPI...

EUVD-2022-53235

Malicious code in bioql PyPI...

EUVD-2023-27985

Malicious code in bioql PyPI...

CVE-2023-23902

A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to remote code execution. An attacker can send a network request to trigger this vulnerability...

CVE-2019-19945

uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large...

CVE-2020-27865

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1860 firmware version 1.04B03 WiFi extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the uhttpd service, which listens on T...

The vulnerability of the uHTTPd web server, a microprogramming-based software for TP-Link ER7206 Omada VPN routers, allows attackers to execute arbitrary commands.

The vulnerability of the uHTTPd web server of the TP-Link ER7206 Omada VPN router exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the uHTTPd web server, a microprogramming-based software for TP-Link ER7206 Omada VPN routers, allows attackers to execute arbitrary commands.

The vulnerability of the uHTTPd web server of the TP-Link ER7206 Omada wireless router exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through ports 80/443 remotely...

The vulnerability of the uHTTPd web server, a microprogramming-based VPN router from TP-Link, model ER7206 Omada, allows a hacker to execute arbitrary commands.

The vulnerability of the uHTTPd web server of the TP-Link ER7206 Omada wireless router exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through ports 80/443 remotely...

TP-Link ER7206 Omada Gigabit VPN Router uhttpd PPTP client Command injection Vulnerability

Talos Vulnerability Report TALOS-2023-1853 TP-Link ER7206 Omada Gigabit VPN Router uhttpd PPTP client Command injection Vulnerability February 6, 2024 CVE Number CVE-2023-36498 SUMMARY A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206...