https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 10:05:47 +0000 https://cve.radiocsirt.org/vuln/cve-2021-27710 <p>Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc&#39;s system function with untrusted input. In the function, &#34;ip&#34; parameter is directly passed to the attacker, allowing them to control the &#34;ip&#34; field to attack the OS.</p> <p>Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc&#39;s system function with untrusted input. In the function, &#34;ip&#34; parameter is directly passed to the attacker, allowing them to control the &#34;ip&#34; field to attack the OS.</p> https://cve.radiocsirt.org/vuln/cve-2021-27710