https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:02:29 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-34639 cnvd-2019-34639 https://cve.radiocsirt.org/vuln/cnvd-2019-34639 https://cve.radiocsirt.org/vuln/euvd-2026-52609 EUVD-2026-52609 https://cve.radiocsirt.org/vuln/euvd-2026-52609 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9118 <p>An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.</p> <p>An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9118 https://cve.radiocsirt.org/vuln/ghsa-w4jr-w44m-rq26 <p>An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.</p> <p>An issue was discovered on Motorola C1 and M2 devices with firmware 1.01 and 1.07 respectively. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body for the SetNTPServerSettings API function, as demonstrated by shell metacharacters in the system_time_timezone field.</p> https://cve.radiocsirt.org/vuln/ghsa-w4jr-w44m-rq26 https://cve.radiocsirt.org/vuln/gsd-2019-9118 gsd-2019-9118 https://cve.radiocsirt.org/vuln/gsd-2019-9118