https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:15:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11528 bdu:2025-11528 https://cve.radiocsirt.org/vuln/bdu:2025-11528 https://cve.radiocsirt.org/vuln/euvd-2026-280998 EUVD-2026-280998 https://cve.radiocsirt.org/vuln/euvd-2026-280998 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34054 <p>An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC.</p> <p>An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-04 UTC.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-34054 https://cve.radiocsirt.org/vuln/ghsa-5r56-hjhv-6gr3 <p>An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root.</p> <p>An unauthenticated command injection vulnerability exists in AVTECH DVR devices via Search.cgi?action=cgi_query. The use of wget without input sanitization allows attackers to inject shell commands through the username or queryb64str parameters, executing commands as root.</p> https://cve.radiocsirt.org/vuln/ghsa-5r56-hjhv-6gr3