CVE-2025-66178

A improper neutralization of special elements used in an os command 'os command injection' vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow an authenticated...

The vulnerability in the cgi-bin/mft/wireless_mft.cgi script of the AirLive IP camera software allows a intruder to obtain user credentials.

The vulnerability in the cgi-bin/mft/wirelessmft.cgi script of the AirLive IP camera software is related to the failure to implement measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands ...