https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:23:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00144 bdu:2024-00144 https://cve.radiocsirt.org/vuln/bdu:2024-00144 https://cve.radiocsirt.org/vuln/cnvd-2025-21600 cnvd-2025-21600 https://cve.radiocsirt.org/vuln/cnvd-2025-21600 https://cve.radiocsirt.org/vuln/euvd-2026-160075 EUVD-2026-160075 https://cve.radiocsirt.org/vuln/euvd-2026-160075 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51572 <p>Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the getMacAddressByIP function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21163.</p> <p>Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the getMacAddressByIP function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21163.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-51572 https://cve.radiocsirt.org/vuln/ghsa-67f8-2vh7-p8ch <p>Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the getMacAddressByIP function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21163.</p> <p>Voltronic Power ViewPower Pro getMacAddressByIp Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the getMacAddressByIP function. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-21163.</p> https://cve.radiocsirt.org/vuln/ghsa-67f8-2vh7-p8ch https://cve.radiocsirt.org/vuln/gsd-2023-51572 gsd-2023-51572 https://cve.radiocsirt.org/vuln/gsd-2023-51572 https://cve.radiocsirt.org/vuln/icsa-24-023-03 <p>The affected product deserializes untrusted data without sufficiently verifying the resulting data will be valid. When a specific service of the affected product receives a certain message from an unauthenticated user, that process may stop. The affected product is vulnerable to an OS command injection, which may allow remote code execution on the underlying operating system. The affected product allows an unauthenticated user to invoke a method that may modify the administrator account password.</p> <p>The affected product deserializes untrusted data without sufficiently verifying the resulting data will be valid. When a specific service of the affected product receives a certain message from an unauthenticated user, that process may stop. The affected product is vulnerable to an OS command injection, which may allow remote code execution on the underlying operating system. The affected product allows an unauthenticated user to invoke a method that may modify the administrator account password.</p> https://cve.radiocsirt.org/vuln/icsa-24-023-03