Tenda FH1202 Privilege Escalation

The vulnerability of the web interface for managing Tenda FH1202 micro-programming software routers is related to deficiencies in access control when processing the end-point /goform/AdvSetWrl. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending a...

CVE-2024-54806

Netgear WNR854T 1.5.2 North America is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web interface...

CVE-2024-54806

Netgear WNR854T 1.5.2 North America is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web interface...

CVE-2025-1449

CVE-2025-1449 concerns Rockwell Automation Verve Asset Manager. Technical details from PT-2025-12814 show the vulnerability affects Verve Asset Manager versions 1.39 and earlier, caused by insufficient variable sanitizing in the administrative web interface for the Legacy Agentless Device Invento...

MGASA-2025-0120 Updated mercurial packages fix security vulnerability

Mercurial SCM Web Interface cross site scripting. CVE-2025-2361...

Updated mercurial packages fix security vulnerability

Mercurial SCM Web Interface cross site scripting. CVE-2025-2361...

CVE-2025-22941

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

CVE-2025-22941

The Adtran 411 ONT (Optical Network Terminal) is affected by a command injection vulnerability in its web interface, specifically in version L80.00.0011.M2 . This flaw, identified as CWE-77 , allows an attacker to escalate privileges to root and execute arbitrary commands on the device. While no ...

CVE-2024-54806

The Netgear WNR854T wireless router, running firmware version 1.5.2 (North America) , is vulnerable to arbitrary command execution via the web interface. The root cause is a failure in the cmd.cgi file to properly filter special characters and commands used in operating system instructions. A rem...

CVE-2024-54806

Netgear WNR854T 1.5.2 North America is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web interface...

CVE-2025-22941: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

PT-2025-13779

Name of the Vulnerable Software and Affected Versions Adtran 411 ONT version L80.00.0011.M2 Description A command injection issue in the web interface allows attackers to escalate privileges to root and execute arbitrary commands. Recommendations For version L80.00.0011.M2, consider restricting...

Adtran 411 ONT security vulnerability

The Adtran 411 ONT is an optical network terminal ONT from Adtran, Inc. It is used to provide fiber-to-the-home FTTH services and support high-speed Internet access. A security vulnerability exists in the Adtran 411 ONT version L80.00.0011.M2, which originates from a command injection in the web...

Unraid security vulnerabilities

Unraid is a suite of operating systems from Unraid, Inc. intended primarily for personal and small business use. A security vulnerability exists in Unraid versions prior to 7.0.1 that originates from a remote user being able to access the Unraid WebGUI and web console as root without authenticati...

CVE-2024-54806: Improper Control of Generation of Code

Netgear WNR854T 1.5.2 North America is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web interface...

CVE-2024-54806

Netgear WNR854T 1.5.2 North America is vulnerable to Arbitrary command execution in cmd.cgi which allows for the execution of system commands via the web interface...

CVE-2025-22941

A command injection vulnerability in the web interface of Adtran 411 ONT L80.00.0011.M2 allows attackers to escalate privileges to root and execute arbitrary commands...

CVE-2025-29928

authentik is an open-source identity provider. Prior to versions 2024.12.4 and 2025.2.3, when authentik was configured to use the database for session storage which is a non-default setting, deleting sessions via the Web Interface or the API would not revoke the session and the session holder wou...

CVE-2025-27405

Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an attacker to craft a URL that, once visited by any user, allows to embed arbitrary Javascript into Icinga Web and to act on behalf of tha...

Security update for mercurial

This update for mercurial fixes the following issues: CVE-2025-2361: Fixed improper sanitization of user-controlled input passed via the cmd parameter in the Mercurial SCM Web Interface bsc1239685 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...