https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 15:15:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-64978 EUVD-2026-64978 https://cve.radiocsirt.org/vuln/euvd-2026-64978 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10987 <p>An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An authenticated attacker can send a specially crafted UDP packet, and execute commands on the vacuum cleaner as root. The bug is in the function REQUEST_SET_WIFIPASSWD (UDP command 153). A crafted UDP packet runs &#34;/mnt/skyeye/mode_switch.sh %s&#34; with an attacker controlling the %s variable. In some cases, authentication can be achieved with the default password of 888888 for the admin account.</p> <p>An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An authenticated attacker can send a specially crafted UDP packet, and execute commands on the vacuum cleaner as root. The bug is in the function REQUEST_SET_WIFIPASSWD (UDP command 153). A crafted UDP packet runs &#34;/mnt/skyeye/mode_switch.sh %s&#34; with an attacker controlling the %s variable. In some cases, authentication can be achieved with the default password of 888888 for the admin account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10987 https://cve.radiocsirt.org/vuln/ghsa-8337-gx57-xm96 <p>An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An authenticated attacker can send a specially crafted UDP packet, and execute commands on the vacuum cleaner as root. The bug is in the function REQUEST_SET_WIFIPASSWD (UDP command 153). A crafted UDP packet runs &#34;/mnt/skyeye/mode_switch.sh %s&#34; with an attacker controlling the %s variable. In some cases, authentication can be achieved with the default password of 888888 for the admin account.</p> <p>An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An authenticated attacker can send a specially crafted UDP packet, and execute commands on the vacuum cleaner as root. The bug is in the function REQUEST_SET_WIFIPASSWD (UDP command 153). A crafted UDP packet runs &#34;/mnt/skyeye/mode_switch.sh %s&#34; with an attacker controlling the %s variable. In some cases, authentication can be achieved with the default password of 888888 for the admin account.</p> https://cve.radiocsirt.org/vuln/ghsa-8337-gx57-xm96 https://cve.radiocsirt.org/vuln/gsd-2018-10987 gsd-2018-10987 https://cve.radiocsirt.org/vuln/gsd-2018-10987