Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:56:24 +0000 bdu:2026-02090 https://cve.radiocsirt.org/vuln/bdu:2026-02090 bdu:2026-02090 https://cve.radiocsirt.org/vuln/bdu:2026-02090 EUVD-2026-262135 https://cve.radiocsirt.org/vuln/euvd-2026-262135 EUVD-2026-262135 https://cve.radiocsirt.org/vuln/euvd-2026-262135 fkie_cve-2025-34152 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34152 <p>An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the &#39;time&#39; parameter of the &#39;/protocol.csp?&#39; endpoint. The input is processed by the internal date &#39;-s&#39; command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.</p> <p>An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the &#39;time&#39; parameter of the &#39;/protocol.csp?&#39; endpoint. The input is processed by the internal date &#39;-s&#39; command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-34152 GHSA-9r22-x3wm-vrr9 https://cve.radiocsirt.org/vuln/ghsa-9r22-x3wm-vrr9 <p>An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the &#39;time&#39; parameter of the &#39;/protocol.csp?&#39; endpoint. The input is processed by the internal date &#39;-s&#39; command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.</p> <p>An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the &#39;time&#39; parameter of the &#39;/protocol.csp?&#39; endpoint. The input is processed by the internal date &#39;-s&#39; command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.</p> https://cve.radiocsirt.org/vuln/ghsa-9r22-x3wm-vrr9