漏洞描述
TOTOLINK NR1800X存在命令注入漏洞，此漏洞是由于cstecgi.cgi对请求中的参数数据验证不足导致的。
TOTOLINK NR1800X CVE-2022-41518 命令注入漏洞
PoC代码
暂无相关漏洞推荐
-
Webmin /package-updates/update.cgi 命令执行漏洞（CVE-2022-36446） 无POC
2025-09-05 | WebminWebmin是Webmin社区的一套基于Web的用于类Unix操作系统中的系统管理工具。 Webmin 1.997之前的版本存在安全漏洞，该漏洞源于其software/apt-lib.pl组件缺少对U... -
CVE-2022-0342: Zyxel authentication bypass patch analysis POC
2025-09-01 | ZyxelAn authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versio... -
CVE-2022-0434: WordPress Page Views Count <2.4.15 - SQL Injection POC
2025-09-01 | WordPressWordPress Page Views Count plugin prior to 2.4.15 contains an unauthenticated SQL injection vulnerab... -
CVE-2022-0540: Atlassian Jira - Authentication bypass in Seraph POC
2025-09-01 | Atlassian JiraA vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication b... -
CVE-2022-0656: uDraw <3.3.3 - Local File Inclusion POC
2025-09-01 | uDrawuDraw before 3.3.3 does not validate the url parameter in its udraw_convert_url_to_base64 AJAX actio...