snykiotcubedev/shadowsocks-4.4.0.0

Download Shadowsocks for Windows PC from FileHorse. % Safe and Secure ✓ Free Download (bit/bit) Latest Version android-file-transfer-linux android-ndk 18 asedriveiiie-serial asedriveiiie-usb asekey exljbris-free exo Download Shadowsocks + Crack / Serial Keys. Size: MB. downloads. Generally speaking, the role of network firewalls is to act as an.

Shadowsocks 4.4.0.0 Free Download With Crack - consider, that

$/ check, leading to command injection. CVEThe package weblate from 0 and before are vulnerable to Remote Code Execution (RCE) via argument injection when using git or mercurial repositories. Authenticated users, can change the behavior of the application in an unintended way, leading to command execution. CVEA command injection vulnerability in the API of the Wavlink WL-WNP3 router, version M31G3.V, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/africanamericanchildrenbooks.com CVEVictor CMS v was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'user_firstname' parameter. CVEAuthenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system, leading to a complete compromise of the switch running AOS-CX in ArubaOS-CX Switches version(s): AOS-CX xxxx: and below, AOS-CX xxxx: and below, AOS-CX xxxx: and below, AOS-CX xxxx: and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities. CVEMultiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version(s): AOS-CX xxxx: and below, AOS-CX xxxx: and below, AOS-CX xxxx: and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities. CVEMultiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete switch compromise in ArubaOS-CX version(s): AOS-CX xxxx: and below, AOS-CX xxxx: and below, AOS-CX xxxx: and below. Aruba has released upgrades for ArubaOS-CX Switch Devices that address these security vulnerabilities. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): and below, and below, HF2 and below, x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability. CVEiTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade. CVECommand injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM/ACOM/ACOM allows a remote attacker to inject arbitrary code via the field. CVEOX App Suite through allows OS Command Injection via Documentconverter (e.g., through an email attachment). CVEAddressed a remote code execution vulnerability by resolving a command injection vulnerability and closing an AWS S3 bucket that potentially allowed an attacker to execute unsigned code on My Cloud Home devices. CVEA command injection remote code execution vulnerability was discovered on Western Digital My Cloud Devices that could allow an attacker to execute arbitrary system commands on the device. The vulnerability was addressed by escaping individual arguments to shell functions coming from user input. CVEA malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP. CVEVMware Carbon Black App Control (x prior to , x prior to , x prior to and x prior to ) contains an OS command injection vulnerability. An authenticated, high privileged malicious actor with network access to the VMware App Control administration interface may be able to execute commands on the server due to improper input validation leading to remote code execution. CVEVMware NSX Edge contains a CLI shell injection vulnerability. A malicious actor with SSH access to an NSX-Edge appliance can execute arbitrary commands on the operating system as root. CVEImproper neutralization of special elements used in a command ('Command Injection') vulnerability in File service functionality in Synology DiskStation Manager (DSM) before allows remote authenticated users to execute arbitrary commands via unspecified vectors. CVEImproper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Synology DiskStation Manager (DSM) before allows remote authenticated users to execute arbitrary commands via unspecified vectors. CVEDell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege. CVEImproper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS SP2-Hotfix1, Analytics On-Prem and earlier versions. CVE** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products and older firmware versions of Secure Mobile Access (SMA) series products, specifically the SRA appliances running all 8.x, sv and earlier versions and Secure Mobile Access (SMA) series products running older firmware sv and earlier versions. CVEAn os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00__ A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability. CVEThe Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator&#;s privilege and perform arbitrary operations on the system or disrupt service. CVEAll versions of iSTAR Ultra prior to version CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system. CVEThe affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code. CVEThe package africanamericanchildrenbooks.com before are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a command injection. CVEThe package cocoapods-downloader before are vulnerable to Command Injection via hg argument injection. When calling the download function (when using hg), the url (and/or revision, tag, branch) is passed to the hg clone command in a way that additional flags can be set. The additional flags can be used to perform a command injection. CVEThe package libvcs before are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get arbitrary command execution. CVEThe package @acrontum/filesystem-template before are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input. CVEAn os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00__ A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a malicious packet to trigger this vulnerability. CVEAll versions of package font-converter are vulnerable to Arbitrary Command Injection due to missing sanitization of input that potentially flows into the child_africanamericanchildrenbooks.com() function. CVEA vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker would need to have Administrator privileges on the device. This vulnerability is due to insufficient input validation of commands supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to the affected command. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges. CVEA vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI API. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. To exploit this vulnerability, an attacker must have valid Administrator privileges on the affected device. CVEA vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected ASA FirePOWER module as the root user. This vulnerability is due to improper handling of undefined command parameters. An attacker could exploit this vulnerability by using a crafted command on the CLI or by submitting a crafted HTTPS request to the web-based management interface of the Cisco ASA that is hosting the ASA FirePOWER module. Note: To exploit this vulnerability, the attacker must have administrative access to the Cisco ASA. A user who has administrative access to a particular Cisco ASA is also expected to have administrative access to the ASA FirePOWER module that is hosted by that Cisco ASA. CVEMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV and RV Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. CVEMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV and RV Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by sending malicious input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system of the affected device. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. CVEA vulnerability in CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject XML into the command parser. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including crafted input in commands. A successful exploit could allow the attacker to inject XML into the command parser, which could result in unexpected processing of the command and unexpected command output. CVEA vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI API. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges. CVEIn addition to the c_rehash shell command injection identified in CVE, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL (Affected ,,,). Fixed in OpenSSL p (Affected o). Fixed in OpenSSL zf (Affected ze). CVEA vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user. To exploit this vulnerability, an attacker would need to have valid administrative credentials on an affected device. CVEA vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The vulnerability is due to insufficient input validation of user supplied data that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP POST request to the NX-API of an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system. Note: The NX-API feature is disabled by default. CVECommand Injection in GitHub repository nuitka/nuitka prior to CVEIn ims service, there is a possible AT command injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS; Issue ID: ALPS CVEOS Command Injection in GitHub repository gogs/gogs prior to CVEOS Command Injection in GitHub repository yogeshojha/rengine prior to CVEFormula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in GitHub repository luyadev/yii-helpers prior to Successful exploitation can lead to impacts such as client-sided command injection, code execution, or remote ex-filtration of contained confidential data. CVECommand Injection vulnerability in git-interface@ in GitHub repository yarkeev/git-interface prior to If both are provided by user input, then the use of a `--upload-pack` command-line argument feature of git is also supported for `git clone`, which would then allow for any operating system command to be spawned by the attacker. CVEOS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This issue affects: Device42 CMDB version and prior versions. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in DIAE_africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in DIAE_africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in DIAE_africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in DIAE_africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in DIAE_africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in Handler_africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability exists in africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEThe c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL (Affected ,,). Fixed in OpenSSL o (Affected n). Fixed in OpenSSL ze (Affected zd). CVEA command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root. CVEA blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server. CVEOkta Advanced Server Access Client for Linux and macOS prior to version was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system. CVEDelta Electronics DIAEnergie (All versions prior to ) has a blind SQL injection vulnerability that exists in HandlerDialog_africanamericanchildrenbooks.com This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. CVEImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in flow computer and remote controller products of ABB ( RMC (Standard), RMCLITE, XIO, XFCG5 , XRCG5 , uFLOG5 , UDC) allows an attacker who successfully exploited this vulnerability could insert and run arbitrary code in an affected system node. CVEOS Command Injection in GitHub repository part-db/part-db prior to CVEOS Command Injection in GitHub repository ljharb/npm-lockfile in v and v CVEArbitrary Command Injection in GitHub repository strapi/strapi prior to CVEOS Command Injection in Packagist microweber/microweber prior to CVEThe affected product is vulnerable to an authenticated OS command injection, which may allow an attacker to inject and execute arbitrary shell commands as the Admin (root) user. CVEThe Visual Form Builder WordPress plugin before is vulnerable to CSV injection allowing a user with low level or no privileges to inject a command that will be included in the exported CSV file, leading to possible code execution. CVEIn GenieACS x before , the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/africanamericanchildrenbooks.com and lib/africanamericanchildrenbooks.com). The vulnerability arises from insufficient input validation combined with a missing authorization check. CVEThe firmware on Moxa TN devices through allows command injection that could lead to device damage. CVED-Link device D-Link DIRPro v was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings. This vulnerability allows attackers to execute arbitrary commands via the samba_name parameter. CVED-Link device D-Link DIRPro v was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl(0).(0)_maclist parameter. CVED-Link device D-Link DIRPro v was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the station_access_enable parameter. CVED-Link device D-Link DIRPro v was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings. This vulnerability allows attackers to execute arbitrary commands via the ApCliKeyStr parameter. CVED-Link device D-Link DIRPro v was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings. This vulnerability allows attackers to execute arbitrary commands via the staticroute_list parameter. CVED-Link device D-Link DIRPro v was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and tomography_ping_ttl parameters. CVETelesquare SDT-CW3B1 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication. CVEA Remote Command Execution (RCE) vulnerability exists in HNAP1/control/africanamericanchildrenbooks.com of D-Link Router DIR DIRA1_FWAbin and africanamericanchildrenbooks.com because backticks can be used for command injection when judging whether it is a reasonable domain name. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function msp_africanamericanchildrenbooks.com This vulnerability allows attackers to execute arbitrary commands via the cmd parameter. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function version_africanamericanchildrenbooks.com This vulnerability allows attackers to execute arbitrary commands via the path parameter. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function urlrd_africanamericanchildrenbooks.com This vulnerability allows attackers to execute arbitrary commands via the url_en parameter. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function upgrade_filter. This vulnerability allows attackers to execute arbitrary commands via the path and time parameters. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function usb_africanamericanchildrenbooks.com This vulnerability allows attackers to execute arbitrary commands via the name parameter. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function httpd_africanamericanchildrenbooks.com This vulnerability allows attackers to execute arbitrary commands via the time parameter. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function proxy_africanamericanchildrenbooks.com This vulnerability allows attackers to execute arbitrary commands via the proxy_srv, proxy_srvport, proxy_lanip, proxy_lanport parameters. CVED-Link device DIGV2.E1 vE1 was discovered to contain a command injection vulnerability in the function wget_africanamericanchildrenbooks.com This vulnerability allows attackers to execute arbitrary commands via the url parameter. CVEtotolink ar Vc is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks. CVED-Link device DIR_ DIR__FWB06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request. CVETenda routers G1 and G3 v()_CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary commands via the pic_name parameter. CVETenda routers G1 and G3 v()_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary commands via the hostName parameter. CVETenda routers G1 and G3 v()_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter. CVEMultiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection. The url parameter of the function module downloadAndUpdate is vulnerable to an command Injection. Unfiltered user input is used to generate code which then gets executed when downloading new firmware. CVEThe Path Sanity Check script of FreeCAD is vulnerable to OS command injection, allowing an attacker to execute arbitrary commands via a crafted FCStd document. CVETOTOLINK AR vcu_B was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. CVETOTOLINK XR vu_B was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName. CVETOTOLINK XR vu_B was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the parameter host_time. CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR before , RBK before , RBR before , RBS before , RBK before , RBR before , and RBS before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR before , RBK before , RBR before , RBS before , RBK before , RBR before , and RBS before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR before , RBR before , RBR before , RBS before , RBS before , RBK before , and RBK before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR before , RBK before , RBR before , RBS before , RBK before , RBR before , and RBS before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before , CBR before , RBK before , RBR before , RBS before , RBK before , RBR before , and RBS before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before , CBR before , RBK before , RBR before , RBS before , RBK before , RBR before , and RBS before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR before , RBK before , RBR before , RBS before , RBK before , RBR before , and RBS before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before , CBR before , RBK before , RBR before , RBS before , RBK before , RBR before , RBS before , RBS40V before , and RBW30 before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR before , RBK before , RBR before , and RBS before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK20 before , RBR20 before , RBS20 before , RBK40 before , RBR40 before , RBS40 before , RBK50 before , RBR50 before , RBS50 before , and RBS50Y before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR before , RP before , and RP before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects Dv2 before , D before , R before , RLG before , R before , R before , XR before , RP before , R before , RP before , and R before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R before , R before , and XR before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before , CBR before , EAX20 before , EAX80 before , EX before , LAX20 before , MK62 before , MR60 before , MS60 before , R before , Rv2 before , Rv3 before , RP before , R before , RP before , R before , R before , RP before , RP before , R before , RP before , RAX15 before , RAX20 before , RAX before , RAX35v2 before , RAX40v2 before , RAX43 before , RAX45 before , RAX50 before , RAX75 before , RAX80 before , RBK before , RBK before , RBR before , RBR before , RBS before , RBS before , RS before , XR before , and XR before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before , CBR before , EAX20 before , EAX80 before , EX before , EX before , EX before , EX before , EX before , EX before , LAX20 before , MR60 before , MS60 before , Rv2 before , R before , Rv2 before , Rv3 before , RP before , R before , RP before , RLG before , R before , R before , RP before , RP before , R before , RP before , R before , R before , RAX15 before , RAX20 before , RAX before , RAX35v2 before , RAX40v2 before , RAX43 before , RAX45 before , RAX50 before , RAX75 before , RAX80 before , RBK before , RBK before , RBK before , RBR before , RBR before , RBR before , RBS before , RBS before , RBS before , RS before , XR before , and XR before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before , CBR before , EAX20 before , EAX80 before , LAX20 before , MR60 before , MR80 before , MS60 before , MS80 before , MK62 before , MK83 before , R before , Rv2 before , Rv3 before , RP before , R before , RP before , R before , R before , RP before , RP before , R before , RP before , RAX15 before , RAX20 before , RAX before , RAX35v2 before , RAX40v2 before , RAX43 before , RAX45 before , RAX50 before , RAX75 before , RAX80 before , RBK before , RBK before , RBR before , RBR before , RBS before , RBS before , RS before , XR before , and XR before CVECertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EXv2 before , EX before , EX before , EX before , LBR before , LBR20 before , R before , R before , R before , RBS50Y before , WNRv5 before , XR before , EXv2 before , EX before , EX before , RAX10 before , RAX before , RAX70 before , EXv2 before , EX before , EXv2 before , RAX before , RAXv2 before , RAX78 before , EX before , RBR10 before , RBR20 before , RBR before , RBR40 before , RBR50 before , EX before , RBS10 before , RBS20 before , RBS before , RBS40 before , RBS50 before , EXv2 before , RBK12 before , RBK20 before , RBK before , RBK40 before , and RBK50 before CVE