rainbutterfly/cve_corpus huggingface dataset:
CVE-2022-26148 
An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:51:27.000Z
CVE-2022-26149 
MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-26T00:00:00.000Z
CVE-2022-26151 
Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-12T23:21:40.000Z
CVE-2022-26155 
An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. XSS can occur via a payload in the SAMLResponse parameter of the HTTP request body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T15:22:47.000Z
CVE-2022-26156 
An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. Injection of a malicious payload within the RelayState= parameter of the HTTP request body results in the hijacking of the form action. Form-action hijacking vulnerabilities arise when an application places user-supplied input into the action URL of an HTML form. An attacker can use this vulnerability to construct a URL that, if visited by another application user, will modify the action URL of a form to point to the attacker's server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T15:24:00.000Z
CVE-2022-26157 
An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. The ASP.NET_Sessionid cookie is not protected by the Secure flag. This makes it prone to interception by an attacker if traffic is sent over unencrypted channels.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T15:25:10.000Z
CVE-2022-26158 
An issue was discovered in the web application in Cherwell Service Management (CSM) 10.2.3. It accepts and reflects arbitrary domains supplied via a client-controlled Host header. Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T15:25:53.000Z
CVE-2022-26159 
The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/<domain>/en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T03:53:46.000Z
CVE-2022-26169 
Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the ref_code parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-02T22:39:33.000Z
CVE-2022-26170 
Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-02T22:39:34.000Z
CVE-2022-26171 
Bank Management System v1.o was discovered to contain a SQL injection vulnerability via the email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-02T22:39:35.000Z
CVE-2022-26173 
JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via http://target_host:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-06-16T21:53:34.000Z
CVE-2022-26174 
A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T21:54:35.000Z
CVE-2022-26180 
qdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T20:08:52.000Z
CVE-2022-26181 
Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligned_dealloc():src/lepton/bitops.cc:108.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-28T18:33:50.000Z
CVE-2022-26183 
PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute PNPM commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T00:00:00.000Z
CVE-2022-26184 
Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T00:00:00.000Z
CVE-2022-26186 
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the exportOvpn interface at cstecgi.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-22T20:13:16.000Z
CVE-2022-26187 
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-22T20:13:17.000Z
CVE-2022-26188 
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via /setting/NTPSyncWithHost.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-22T20:13:19.000Z
CVE-2022-26189 
TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the langType parameter in the login interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-22T20:13:21.000Z
CVE-2022-26197 
Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-25T20:21:42.000Z
CVE-2022-26198 
Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-26T23:18:49.000Z
CVE-2022-26201 
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T13:07:17.000Z
CVE-2022-26205 
Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-27T00:31:06.000Z
CVE-2022-26206 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setLanguageCfg, via the langType parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:13.000Z
CVE-2022-26207 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDiagnosisCfg, via the ipDoamin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:14.000Z
CVE-2022-26208 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setWebWlanIdx, via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:14.000Z
CVE-2022-26209 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUploadSetting, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:16.000Z
CVE-2022-26210 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setUpgradeFW, via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:16.000Z
CVE-2022-26211 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function CloudACMunualUpdate, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:17.000Z
CVE-2022-26212 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function setDeviceName, via the deviceMac and deviceName parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:17.000Z
CVE-2022-26213 
Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:18.000Z
CVE-2022-26214 
Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.5137_B20200730, A3000RU V5.9c.5185_B20201128, and A810R V4.1.2cu.5182_B20201026 were discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands via the host_time parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-15T21:56:18.000Z
CVE-2022-26233 
Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-03T22:05:41.000Z
CVE-2022-26235 
A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installation, the permissions set by Remisol Advance allow non-privileged users to overwrite and/or manipulate executables and libraries that run as the elevated SYSTEM user on Windows.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-06T00:00:00.000Z
CVE-2022-26236 
The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-06T00:00:00.000Z
CVE-2022-26237 
The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-06T00:00:00.000Z
CVE-2022-26238 
The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-06T00:00:00.000Z
CVE-2022-26239 
The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows unprivileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-06T00:00:00.000Z
CVE-2022-26240 
The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and prior allows non-privileged users to overwrite and manipulate executables and libraries. This allows attackers to access sensitive data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-10-06T00:00:00.000Z
CVE-2022-26243 
Tenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T18:57:15.000Z
CVE-2022-26244 
A stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "special" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T23:07:43.000Z
CVE-2022-26245 
Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-27T13:36:08.000Z
CVE-2022-26246 
TMS v2.28.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /TMS/admin/setting/mail/createorupdate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-20T18:34:59.000Z
CVE-2022-26247 
TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-20T18:34:59.000Z
CVE-2022-26249 
Survey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers to execute arbitrary code or access sensitive information via a CSV injection attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-24T21:12:41.000Z
CVE-2022-26250 
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T00:22:49.000Z
CVE-2022-26251 
The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-06T00:22:47.000Z
CVE-2022-26252 
aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain the root user private SSH key(id_rsa).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-27T15:03:59.000Z
CVE-2022-26254 
WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-27T16:06:21.000Z
CVE-2022-26255 
Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-27T23:15:07.000Z
CVE-2022-26258 
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-27T00:00:00.000Z
CVE-2022-26259 
A buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA-KL, AHB80X04R-MH, AHB80X04R-MH-V2, AHB80X04-R-MH-V3, AHB80N16T-GS, AHB80N32F4-LME, and NBD90S0VT-QW allows attackers to cause a Denial of Service (DoS) via a crafted RSTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T00:03:17.000Z
CVE-2022-26260 
Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-22T18:15:20.000Z
CVE-2022-26263 
Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-25T16:45:10.000Z
CVE-2022-26265 
Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T22:57:01.000Z
CVE-2022-26266 
Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T22:57:01.000Z
CVE-2022-26267 
Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenance_actions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-18T22:57:03.000Z
CVE-2022-26268 
Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T00:32:52.000Z
CVE-2022-26269 
Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-29T00:34:58.000Z
CVE-2022-26271 
74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url parameter at \index\controller\Download.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T01:00:47.000Z
CVE-2022-26272 
A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to the file application/config/config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-24T21:50:52.000Z
CVE-2022-26273 
EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T01:09:42.000Z
CVE-2022-26276 
An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-12T00:29:31.000Z
CVE-2022-26278 
Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T20:58:32.000Z
CVE-2022-26279 
EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-24T21:58:39.000Z
CVE-2022-26280 
Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T21:28:45.000Z
CVE-2022-26281 
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-05T01:50:35.000Z
CVE-2022-26283 
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the view_plan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T22:25:20.000Z
CVE-2022-26284 
Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T22:25:21.000Z
CVE-2022-26285 
Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T22:25:22.000Z
CVE-2022-26289 
Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-23T23:24:55.000Z