https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:15:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-15915 bdu:2025-15915 https://cve.radiocsirt.org/vuln/bdu:2025-15915 https://cve.radiocsirt.org/vuln/cnvd-2025-29714 cnvd-2025-29714 https://cve.radiocsirt.org/vuln/cnvd-2025-29714 https://cve.radiocsirt.org/vuln/euvd-2026-260866 EUVD-2026-260866 https://cve.radiocsirt.org/vuln/euvd-2026-260866 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60702 <p>A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The `setDiagnosisCfg` function retrieves the `ipDoamin` parameter from user input via `websGetVar` and concatenates it directly into a `ping` system command executed via `CsteSystem()` without any sanitization. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router&#39;s web interface.</p> <p>A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The `setDiagnosisCfg` function retrieves the `ipDoamin` parameter from user input via `websGetVar` and concatenates it directly into a `ping` system command executed via `CsteSystem()` without any sanitization. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router&#39;s web interface.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-60702 https://cve.radiocsirt.org/vuln/ghsa-chxj-6g8r-wh5q <p>A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The `setDiagnosisCfg` function retrieves the `ipDoamin` parameter from user input via `websGetVar` and concatenates it directly into a `ping` system command executed via `CsteSystem()` without any sanitization. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router&#39;s web interface.</p> <p>A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `system.so` binary. The `setDiagnosisCfg` function retrieves the `ipDoamin` parameter from user input via `websGetVar` and concatenates it directly into a `ping` system command executed via `CsteSystem()` without any sanitization. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device through specially crafted HTTP requests to the router&#39;s web interface.</p> https://cve.radiocsirt.org/vuln/ghsa-chxj-6g8r-wh5q