Command injection

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function...

PT-2024-20365 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description: A command injection issue was discovered via the url parameter in the setUrlFilterRules function. This allows for potential exploitation. No information is provided about the estimat...

CVE-2024-24332

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function...

CVE-2024-24332

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilterRules function...

TOTOLINK A3300R 安全漏洞

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a command injection vulnerability that stems from the url parameter of the setUrlFilterRules method failing to...

Rebuild Security Vulnerability

Rebuild is a highly customizable enterprise management system. A security vulnerability exists in Rebuild version 3.5.5 due to a server-side request forgery vulnerability in the url parameter of the readRawText function of the HTTP Request Handler component...

Code Injection in paddlepaddle

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...

GHSA-CHJ7-W3F6-CVFJ Code Injection in paddlepaddle

The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...

Input validation

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to the parameter at the web interface of...

CVE-2023-52069

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

CVE-2023-52069

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

Cross site scripting

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

CVE-2023-52069

CVE-2023-52069 affects kodbox v1.49.04, which is reported to contain a cross-site scripting (XSS) vulnerability via a URL parameter. The CVSS v3.1 base score is 5.4 (Medium), with attack vector NETWORK, attack complexity LOW, privileges required LOW, user interaction REQUIRED, and a Changed scope...

CVE-2023-52069

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

PT-2024-15716 · Zhihuiyun · Zhihuiyun

Name of the Vulnerable Software and Affected Versions: ZhiHuiYun versions up to 4.4.13 Description: A critical issue affects the function download network image of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side...

ZhiHuiYun Code Issue Vulnerability

ZhiHuiYun is a smart campus solution from ZhiHuiYun. ZhiHuiYun 4.4.13 and earlier versions have a code issue vulnerability that stems from a server-side request forgery SSRF vulnerability in the parameter url of the downloadnetworkimage function in /app/Http/Controllers/ImageController.php...

The vulnerability of the corporate Bluetooth gateway Cassia X1000 allows a intruder to execute arbitrary code.

The vulnerability of the corporate Bluetooth gateway Cassia X1000 is related to the lack of measures taken to secure data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges using the queueUrl parameter in /bypass/conf...

PT-2024-15637 · Unknown · Cxbsoft Url-Shorting

Name of the Vulnerable Software and Affected Versions: CXBSoft Url-shorting versions up to 1.3.1 Description: A critical issue affects some unknown functionality of the file index.php. The manipulation of the url argument leads to sql injection. The exploit has been disclosed to the public. The...

Cassia Networks Gateway Security Vulnerability

Cassia Networks Gateway is an IoT gateway from Cassia Networks. A security vulnerability exists in Cassia Networks Gateway versions XC10002.1.1.2303082218, XC20002.1.1.2303090947, which stems from an uncleared queueUrl parameter in /bypass/config...

PT-2024-15455 · Youke365 · Youke365

Name of the Vulnerable Software and Affected Versions: Youke365 versions up to 1.5.3 Description: A critical issue has been found in Youke365, affecting an unknown functionality of the file /app/api/controller/collect.php. The manipulation of the url argument leads to server-side request forgery...