https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:07:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-02284 bdu:2025-02284 https://cve.radiocsirt.org/vuln/bdu:2025-02284 https://cve.radiocsirt.org/vuln/cnvd-2025-11442 cnvd-2025-11442 https://cve.radiocsirt.org/vuln/cnvd-2025-11442 https://cve.radiocsirt.org/vuln/euvd-2026-258644 EUVD-2026-258644 https://cve.radiocsirt.org/vuln/euvd-2026-258644 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39795 <p>Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.</p> <p>Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39795 https://cve.radiocsirt.org/vuln/ghsa-qxh2-8jw8-hx7g <p>Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.</p> <p>Multiple external config control vulnerabilities exist in the nas.cgi set_nas() proftpd functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to permission bypass. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A configuration injection vulnerability exists in the `ftp_max_sessions` POST parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-qxh2-8jw8-hx7g