166 matches found
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-59764
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...
CVE-2026-59764
Summary: CVE-2026-59764 affects ELECOM wireless LAN routers and access points. The issue is an OS command injection in the WebUI that enables an attacker who can log in to the product to execute arbitrary OS commands. The vulnerability is supported by multiple sources (NVD entries) with confirmed...
CVE-2026-44387
Summary (CVE-2026-44387): ELECOM wireless LAN routers and access points are affected by a reflected cross-site scripting vulnerability in the WebUI. Exploitation could allow an arbitrary script to run in a logged-in user’s browser. No exploitation details are provided in the connected documents b...
CVE-2026-44387
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
CVE-2026-27650
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products...
EUVD-2026-16551
Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...
CVE-2026-27650
OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products...
CVE-2019-16288
On Tenda N301 wireless routers, a long string in the wifiSSID parameter of a goform/setWifi POST request causes the device to crash...
EUVD-2017-6518
Malware in sbrugna...
EUVD-2023-30593
Malicious code in bioql PyPI...
EUVD-2025-19052
Malicious code in bioql PyPI...
EUVD-2023-31532
Malicious code in bioql PyPI...
Multiple vulnerabilities in ELECOM wireless LAN routers
Overview Multiple wireless LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Hidden functionality CWE-912 - CVE-2025-46267 OS command injection in WebGUI CWE-78 - CVE-2025-53472 Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC...
CVE-2025-6559
Multiple wireless router models from Sapido have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. The affected models are out of support; replacing the device is recommended...
CVE-2025-6559
Multiple wireless router models from Sapido have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. The affected models are out of support; replacing the device is recommended...
CVE-2025-6559 Sapido Wireless Router - OS Command Injection
Multiple wireless router models from Sapido have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. The affected models are out of support; replacing the device is recommended...
CVE-2025-5443 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injection
A vulnerability, which was classified as critical, was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected is the function wirelessAdvancedHidden of the file /goform/wirelessAdvancedHidden. The manipulation of the...
CVE-2025-5443
CVE-2025-5443 affects Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 (versions 1.0.013.001–1.2.07.001). The vulnerable component is the wirelessAdvancedHidden function in /goform/wirelessAdvancedHidden. Malicious manipulation of ExtChSelector/24GSelector/5GSelector leads to OS command injectio...