5 matches found
EUVD-2023-45431
Malicious code in bioql PyPI...
CVE-2024-57024
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...
CVE-2024-57024
The TOTOLINK X5000R router, specifically version V9.1.0cu.2350_B20230313 , is vulnerable to an OS command injection vulnerability. The flaw exists in the setWiFiScheduleCfg function within the web/cgi-bin/cstecgi.cgi script due to a failure to neutralize special characters in the eMinute paramete...
CVE-2024-57022
The CVE-2024-57022 entry affects TOTOLINK X5000R, firmware version V9.1.0cu.2350_B20230313. The root cause is improper filtering of shell constructs in the sHour parameter of setWiFiScheduleCfg, enabling OS command injection. This vulnerability allows arbitrary command execution over the network ...