Vulnerabilities
Totolink X2000R Remote Code Execution Vulnerability in boa formUpload Function
An authenticated HTTP request can trigger arbitrary code execution in the X2000R router due to a flaw in the boa formUpload function.
OS Command Injection
Everything NetSec Observer has reported about OS Command Injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Video-stitch Unquoted Filename Vulnerability Enables Critical Shell Command Injection Before 2.0.0-beta.1
An unquoted filename flaw in Video-stitch allows attackers to run shell commands with Node.js privileges via specific video processing functions.