Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-34044
Not yet scoredAwaiting CVSS assessment
Description
A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC.
projectdiscovery/nuclei-templates
GitHubCommunity curated list of templates for the nuclei engine to find security vulnerabilities.
GitHubCommunity curated list of templates for the nuclei engine to find security vulnerabilities.NVD