Cha0Yang

A flaw exists in Comfast CF-E4 that allows for remote command injection. The issue is located within the HTTP POST Request Handler component, specifically in the file `/cgi-bin/mbox-config?method=SET&section=ntp timezone`. Manipulation of the `timestr` argument can lead to unauthorized command execution. The exploit for this issue is publicly available. The vendor was contacted regarding this disclosure but did not provide a response.

A flaw exists in the rehttpd component of UTT HiPER 810. Specifically, the `sub 4407D4` function within the `/goform/formReleaseConnect` file is susceptible to command injection. Manipulating the `Isp Name` argument can allow for remote execution of commands. The exploit for this issue has been publicly disclosed.

A flaw exists in the `doSystem` function within the `/goform/setSysAdm` file. Manipulation of the `passwd1` argument can result in command injection. This issue may be exploited remotely. The exploit is publicly available.

A flaw exists in the `setSysAdm` function within the `/goform/formUser` file. Manipulating the `passwd1` argument can lead to command injection. Remote exploitation is possible. The details of the exploit have been publicly disclosed. The vendor was informed of this disclosure but did not respond.

A flaw exists in D-Link DCS-931L up to version 1.13.0 that allows for operating system command injection. This occurs through manipulation of the `AdminID` argument within the /goform/setSysAdmin file. The attack can be initiated remotely. The exploit is publicly available. This issue impacts products that are no longer supported by the vendor.

A flaw exists in the function `sub 446B18` located in the file `/goform/formPdbUpConfig`. Manipulation of the `policyNames` argument can result in operating system command injection. This issue is potentially exploitable remotely. The exploit has been publicly disclosed.

A flaw exists in UTT HiPER 810 that allows for remote command injection. The issue is located in the `sub 43F020` function within the `/goform/formPdbUpConfig` file. Manipulation of the `policyNames` argument can lead to the execution of arbitrary commands. The exploit for this issue is publicly available.

A buffer overflow issue exists in the `strcpy` function within the `/goform/setSysAdm` file of UTT HiPER 810. Manipulation of the `passwd1` argument triggers the overflow. Remote exploitation is possible via the `/goform/setSysAdm` API endpoint. The exploit has been published.