https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 18:32:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-280359 EUVD-2026-280359 https://cve.radiocsirt.org/vuln/euvd-2026-280359 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25671 <p>VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter. Attackers can send POST requests to the changeip.php endpoint with malicious payload in the mtu_eth0 field to execute commands as the apache user.</p> <p>VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter. Attackers can send POST requests to the changeip.php endpoint with malicious payload in the mtu_eth0 field to execute commands as the apache user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-25671 https://cve.radiocsirt.org/vuln/ghsa-gx46-63hv-r9x3 <p>VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter. Attackers can send POST requests to the changeip.php endpoint with malicious payload in the mtu_eth0 field to execute commands as the apache user.</p> <p>VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 parameter. Attackers can send POST requests to the changeip.php endpoint with malicious payload in the mtu_eth0 field to execute commands as the apache user.</p> https://cve.radiocsirt.org/vuln/ghsa-gx46-63hv-r9x3