Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

26 matches found

RedhatCVE
RedhatCVE•added 2025/02/05 9:18 p.m.•27 views

CVE-2022-2488

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

9.8CVSS7.2AI score0.33411EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV•added 2023/11/13 12:00 a.m.•11 views

VulnCheck KEV: CVE-2022-2488

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

9.8CVSS7.9AI score0.33411EPSS
SaveIn wildExploits1References720
NVD
NVD•added 2022/07/20 12:15 p.m.•39 views

CVE-2022-2487

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

9.8CVSS0.79304EPSS
SaveExploits1References2
NVD
NVD•added 2022/07/20 12:15 p.m.•59 views

CVE-2022-2488

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

9.8CVSS0.33411EPSS
SaveExploits1References3
NVD
NVD•added 2022/07/20 12:15 p.m.•30 views

CVE-2022-2486

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

9.8CVSS0.30194EPSS
SaveExploits1References2
Prion
Prion•added 2022/07/20 12:15 p.m.•33 views

Command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

7.5CVSS9.8AI score0.30194EPSS
SaveExploits1References2
Prion
Prion•added 2022/07/20 12:15 p.m.•29 views

Command injection

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

7.5CVSS9.8AI score0.33411EPSS
SaveExploits1References2
Prion
Prion•added 2022/07/20 12:15 p.m.•24 views

Command injection

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

7.5CVSS9.8AI score0.79304EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment•added 2022/07/20 11:35 a.m.•14 views

CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

8CVSS7.7AI score0.33411EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2022/07/20 11:35 a.m.•67 views

CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

8CVSS10AI score0.33411EPSS
SaveExploits1References2
CVE
CVE•added 2022/07/20 11:35 a.m.•203 views

CVE-2022-2488

Summary: CVE-2022-2488 affects WAVLINK WN535K2 and WN535K3 routers. The issue is an OS command injection in the web endpoint /cgi-bin/touchlist_sync.cgi triggered by manipulating the IP parameter. Affected software: WAVLINK WN535K2/WN535K3 (router firmware). Root cause / vulnerability detail (as ...

9.8CVSS9.2AI score0.33411EPSS
SaveIn wildExploits1References3Affected Software1
Vulnrichment
Vulnrichment•added 2022/07/20 11:35 a.m.•14 views

CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

8CVSS7.9AI score0.79304EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2022/07/20 11:35 a.m.•52 views

CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection

A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument starthour leads to os command injection. The exploit has been disclosed to the public and may be us...

8CVSS10AI score0.79304EPSS
SaveExploits1References2
CVE
CVE•added 2022/07/20 11:35 a.m.•90 views

CVE-2022-2487

WAVLINK WN535K2 and WN535K3 routers are affected by OS command injection in /cgi-bin/nightled.cgi due to manipulation of the start_hour parameter. The underlying issue allows remote code execution, with potential full system compromise, data modification/leakage, and control of the device as desc...

9.8CVSS9.3AI score0.79304EPSS
SaveIn wildExploits1References2Affected Software1
Vulnrichment
Vulnrichment•added 2022/07/20 11:35 a.m.•11 views

CVE-2022-2486 WAVLINK WN535K2/WN535K3 os command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

8CVSS7.7AI score0.30194EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2022/07/20 11:35 a.m.•47 views

CVE-2022-2486 WAVLINK WN535K2/WN535K3 os command injection

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

8CVSS10AI score0.30194EPSS
SaveExploits1References2
CVE
CVE•added 2022/07/20 11:35 a.m.•92 views

CVE-2022-2486

CVE-2022-2486 affects WAVLINK WN535K2 and WN535K3 routers. A vulnerability in an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade allows OS command injection via manipulation of the argument key. Documents describe that an attacker can execute commands, access/modify data, obtain sensitive...

9.8CVSS9.2AI score0.30194EPSS
SaveIn wildExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2022/07/20 12:00 a.m.•6 views

CVE-2022-2486: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The exploit has been disclosed to the public and may be used...

9.8CVSS8AI score0.30194EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2022/07/20 12:00 a.m.•7 views

CVE-2022-2488: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlistsync.cgi. The manipulation of the argument IP leads to os command injection. The exploit has been disclosed to the public and may be used...

9.8CVSS7.9AI score0.33411EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies•added 2022/07/20 12:00 a.m.•1 views

PT-2022-16933

Name of the Vulnerable Software and Affected Versions WAVLINK WN535K2 WAVLINK WN535K3 Description A critical issue was found in the file /cgi-bin/mesh.cgi?page=upgrade, where the manipulation of the key argument leads to os command injection. The exploit has been disclosed to the public and may b...

9.8CVSS0.30194EPSS
SaveExploits1References4
Rows per page
Query Builder