Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:32:16 +0000 cnvd-2021-94941 https://cve.radiocsirt.org/vuln/cnvd-2021-94941 cnvd-2021-94941 https://cve.radiocsirt.org/vuln/cnvd-2021-94941 EUVD-2026-30327 https://cve.radiocsirt.org/vuln/euvd-2026-30327 EUVD-2026-30327 https://cve.radiocsirt.org/vuln/euvd-2026-30327 fkie_cve-2021-38557 https://cve.radiocsirt.org/vuln/fkie_cve-2021-38557 <p>raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh with any executable content.</p> <p>raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh with any executable content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-38557 GHSA-536p-4pcj-5mr9 — raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. https://cve.radiocsirt.org/vuln/ghsa-536p-4pcj-5mr9 <p><strong>Affected:</strong> Packagist: billz/raspap-webgui</p> <p>raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh with any executable content.</p> <p><strong>Affected:</strong> Packagist: billz/raspap-webgui</p> <p>raspap-webgui in RaspAP 2.6.6 allows attackers to execute commands as root because of the insecure sudoers permissions. The www-data account can execute /etc/raspap/hostapd/enablelog.sh as root with no password; however, the www-data account can also overwrite /etc/raspap/hostapd/enablelog.sh with any executable content.</p> https://cve.radiocsirt.org/vuln/ghsa-536p-4pcj-5mr9 gsd-2021-38557 https://cve.radiocsirt.org/vuln/gsd-2021-38557 gsd-2021-38557 https://cve.radiocsirt.org/vuln/gsd-2021-38557