H0E4A0R1T

A critical vulnerability has been found in the Altenergy Power Control Software, affecting the `get status zigbee` function of the file `/index.php/display/status zigbee`. The manipulation of the `date` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A critical issue has been found in the software, affecting some unknown processing of the file /index.php/display/database/, leading to improper authorization. The attack may be initiated remotely. Other endpoints might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.

A critical issue affects the `sslvpn config mod` function of the `/vpn/list ip network.php` file in the Web Interface component. The manipulation of the `template` and `stylenum` arguments leads to os command injection. This issue can be exploited remotely.

A critical issue affects the function `sslvpn config mod` of the file `/vpn/vpn template style.php` in the Web Interface component. The manipulation of the argument `template/stylenum` leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue affects the `sslvpn config mod` function of the `/vpn/list service manage.php` file in the Web Interface component. The manipulation of the `template` and `stylenum` arguments leads to OS command injection. This can be initiated remotely. The issue has been publicly disclosed and may be exploited.

The issue is related to the function `sslvpn config mod` of the file `/vpn/list vpn web custom.php` in the web interface of the affected devices. It is caused by the failure to neutralize special elements used in the command when processing the `template` and `stylenum` parameters. This can lead to OS command injection, allowing a remote attacker to execute arbitrary commands. The attack can be initiated remotely.

A critical issue affects some unknown functionality of the file /view/vpn/autovpn/sub commit.php, allowing for os command injection through the manipulation of the `key` argument. This can be exploited remotely. The issue has been publicly disclosed and may be used by attackers.

A critical issue affects an unknown functionality of the file /view/vpn/autovpn/online check.php, allowing for os command injection through the manipulation of the `peernode` argument. This can be exploited remotely. The issue has been publicly disclosed and may be used by attackers.

A critical issue affects the processing of the file /view/systemConfig/sys user/user commit.php, allowing for os command injection through the manipulation of the `email2/user name` argument. This can be exploited remotely. The issue has been publicly disclosed and may be used by attackers.

A critical issue has been found in the file /view/vpn/autovpn/online.php, where the manipulation of the `peernode` argument leads to os command injection. This allows an attacker to launch the attack remotely and execute arbitrary commands. The exploit has been disclosed to the public.

The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a remote attacker to execute arbitrary commands by manipulating the `phyport` argument in the `addVlan` function of the `/view/networkConfig/vlan/vlan add commit.php` file, leading to os command injection. The exploit has been disclosed to the public and may be used.

A critical issue has been found, affecting an unknown function of the file /manager/ipconfig new.php. The manipulation of the `dev` argument leads to os command injection, allowing for remote attacks.

A critical issue has been found in the Arris VAP2500, affecting an unknown functionality of the file /assoc table.php. The manipulation of the `id` argument leads to command injection. This issue can be exploited remotely.

A critical issue affects some unknown functionality of the file /diag s.php. The manipulation of the `customer info` argument leads to command injection. The attack can be launched remotely.

A critical issue has been discovered, affecting an unknown part of the file /tools command.php. The manipulation of the `cmb header/txt command` argument leads to command injection. It is possible to initiate the attack remotely.

Name of the Vulnerable Software and Affected Versions: Wangshen SecGate 3600 versions up to 20240516 Description: A critical issue was found, affecting an unknown part of the file /?g=log import save. The manipulation of the `reqfile` argument leads to unrestricted upload. This issue can be initiated remotely. Recommendations: For versions up to 20240516, as a temporary workaround, consider restricting access to the `/?g=log import save` endpoint until a patch is available. Avoid using the `reqfile` argument in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

A critical issue has been found in the file /useratte/resmanage.php, allowing for unrestricted upload through the manipulation of the `file` argument. This can be exploited remotely, potentially leading to arbitrary code execution. The issue affects products that are no longer supported by the maintainer, and the vendor has confirmed that the product is end-of-life.

A critical vulnerability was found in the D-Link DAR-7000 and DAR-8000 routers, affecting an unknown functionality of the file /user/onlineuser.php. The manipulation of the `file upload` argument leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A critical vulnerability has been found in the D-Link DAR-7000-40, affecting an unknown function of the file `interface/sysmanage/licenseauthorization.php`. The manipulation of the argument `file upload` leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This issue allows a remote attacker to execute arbitrary code.

A critical issue affects an unknown part of the file /url/url.php, allowing for unrestricted upload through the manipulation of the `file upload` argument. This can be initiated remotely, potentially leading to the execution of arbitrary code. The exploit has been disclosed publicly.