CVE Records

LB-LINK BL-WR9000 set_wifi sub_458754 command injection

D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection

D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection

D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection

D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection

D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection

D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection

D-Link DNS-1550-04 wizard_mgr.cgi command injection

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

Google Skia Out-of-Bounds Write Vulnerability

Lantronix EDS5000, G520, and X300 OS Command Injection

Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection

Wavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection

Wavlink WL-NU516U1 adm.cgi usb_p910 command injection

Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection

Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection

Cisco Secure Firewall Management Center Software Remote Code Execution Vulnerability

Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability

D-Link DIR-868L SSDP Service sub_1BF84 os command injection

User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration

Integer Overflow or Wraparound in Graphics

openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter

VMware Aria Operations command injection vulnerability

Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability

Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Intelbras TIP 635G Ping os command injection

HummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection

HummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection

HummerRisk Cloud Task Scheduler ResourceCreateService.java command injection

DrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection

qinming99 dst-admin restore revertBackup command injection

Vaelsys HTTP POST Request tree_server.php os command injection

Tosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injection

Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability

Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability

UTT HiPER 520 Web Management formReleaseConnect sub_44EFB4 os command injection

UTT HiPER 520 Web Management formPdbUpConfig sub_44D264 os command injection

Comfast CF-E7 webmggnt mbox-config sub_441CF4 command injection

Comfast CF-E7 webmggnt mbox-config sub_41ACCC command injection

Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow

Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

Wavlink WL-NU516U1 firewall.cgi singlePortForwardDelete command injection

Comfast CF-E4 HTTP POST Request mbox-config command injection

Comfast CF-N1 V2 mbox-config sub_44AB9C command injection

Comfast CF-N1 V2 mbox-config sub_44AC4C command injection

Wavlink WL-WN579A3 wireless.cgi AddMac command injection

Wavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection

Wavlink WL-WN579A3 login.cgi command injection

Wavlink WL-WN579A3 wireless.cgi multi_ssid command injection

Google Chromium CSS Use-After-Free Vulnerability

Soliton Systems K.K FileZen OS Command Injection Vulnerability

Apple Multiple Buffer Overflow Vulnerability

Migration, Backup, Staging <= 0.9.123 - Unauthenticated Arbitrary File Upload

Windows Notepad App Remote Code Execution Vulnerability

Windows NTLM Spoofing Vulnerability

Windows Remote Access Connection Manager Denial of Service Vulnerability

Microsoft Word Security Feature Bypass Vulnerability

Windows Shell Security Feature Bypass Vulnerability

MSHTML Framework Security Feature Bypass Vulnerability

Windows Remote Desktop Services Elevation of Privilege Vulnerability

Desktop Window Manager Elevation of Privilege Vulnerability

Remote Code Execution on TP-Link Tapo C260 by Guest User

Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

D-Link DCS-931L setSysAdmin os command injection

D-Link DCS-931L setSystemAdmin doSystem command injection

UTT 进取 521G formPdbUpConfig sub_446B18 os command injection

Great Developers Certificate Generation System csv.php os command injection

UTT 进取 521G setSysAdm doSystem command injection

D-Link DIR-600 ssdp.cgi command injection

D-Link DIR-823X set_qos sub_420688 os command injection

XixianLiang HarmonyOS-mcp-server input_text os command injection

D-Link DIR-823X set_mac_clone os command injection

D-Link DIR-823X set_password os command injection

UTT HiPER 810 formUser setSysAdm command injection

Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

Fortinet FortiClient EMS SQL Injection Vulnerability

DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection

Potential SQL injection via raster lookups on PostGIS

Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

NixOs Odoo database and filestore publicly accessible with default odoo configuration

vLLM leaks a heap address when PIL throws an error

Unbounded External Image Fetch in Validation Leads to Resource-Exhaustion DoS in huggingface/text-generation-inference

-

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal

SolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability

SolarWinds Web Help Desk Security Control Bypass Vulnerability

D-Link DIR-615 MAC Filter Configuration adv_mac_filter.php os command injection

D-Link DIR-615 URL Filter set_temp_nodes.php os command injection

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.