N1nEmAn/wp

GitHub

github.com

Releases1

Frequency

Last Release over 1 year ago

Stars3

a md repo

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-45885 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `autodiscovery_clear.`
CVE-2024-45887 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `doOpenVPN.`
CVE-2024-45888 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `set_ap_map_config.'
CVE-2024-45889 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `commandTable.`
CVE-2024-45890 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `download_ovpn.`
CVE-2024-45891 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `delete_wlan_profile.`
CVE-2024-45893 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `setSWMOption.`
CVE-2024-45882 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `delete_map_profile.`
CVE-2024-45884 ↗	Nov 4, 2024Monday, 4 November 2024, 15:15	8 HIGH	—
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the `action` parameter in `cgi-bin/mainfunction.cgi` is set to `setSWMGroup.`
CVE-2024-45880 ↗	Oct 8, 2024Tuesday, 8 October 2024, 15:15	8 HIGH	—
A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to execute commands for setting parameters such as MAC address without proper input filtering. This allows malicious users to inject and execute arbitrary commands.
CVE-2024-43027 ↗	Aug 21, 2024Wednesday, 21 August 2024, 16:15	8 HIGH	—
DrayTek Vigor 3900 before v1.5.1.5_Beta, DrayTek Vigor 2960 before v1.5.1.5_Beta and DrayTek Vigor 300B before v1.5.1.5_Beta were discovered to contain a command injection vulnerability via the action parameter at cgi-bin/mainfunction.cgi.
CVE-2024-36699 ↗	Jun 12, 2024Wednesday, 12 June 2024, 14:15	—	—
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.