Minuteman UPS system_param.csp unauth command injection

Unauthenticated POST /systemparam.csp with malicious WanIPAddr breaks out of ifconfig eth0 … netmask … system call. !/usr/bin/env python3 -- coding: utf-8 -- """Minuteman UPS NMC systemparam.csp WanIPAddr command injection.""" from future import annotations import re from urllib.parse import...

Belkin F9K1015 Command Injection Vulnerability

The Belkin F9K1015 is a WiFi signal extender. The Belkin F9K1015 suffers from a command injection vulnerability that stems from incorrect manipulation of the parameter wanipaddr in the file /goform/formBSSetSitesurvey. An attacker can exploit this vulnerability to execute arbitrary commands on th...

CVE-2025-11292

A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...

EUVD-2025-32457

A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the public...

CVE-2025-11292

A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...

CVE-2025-11292 Belkin F9K1015 formBSSetSitesurvey command injection

A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...

CVE-2025-11292 Belkin F9K1015 formBSSetSitesurvey command injection

A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...

Belkin F9K1015 security vulnerability

Belkin F9K1015 is a WiFi signal extender from Belkin Canada. A security vulnerability exists in the Belkin F9K1015 version 1.00.10, which stems from incorrect manipulation of the parameter wanipaddr in the file /goform/formBSSetSitesurvey, which could lead to a command injection attack...

CVE-2025-11292: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...

CVE-2025-7082: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey of the component webs. The manipulation of the argument wanipaddr/wannetmask/wangateway/wlssid is directly passed by t...