HACHp1

2 exploits Active since May 2019

CVE-2019-12272 NOMISEC CRITICAL WORKING POC

OpenWrt LuCI <0.10 - Command Injection

In OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin/status/realtime/wireless_status of the web application are affected by a command injection vulnerability.

20 stars

CVSS 9.8

View Code

CVE-2019-15107 NOMISEC CRITICAL WORKING POC

Webmin < 1.920 - OS Command Injection

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

2 stars

CVSS 9.8

View Code