{"vulnerability": "CVE-2024-4274", "sightings": [{"uuid": "5a9b2236-25ed-4e12-8235-7689cdeb3cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42741", "type": "seen", "source": "https://t.me/cvedetector/2896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42741 - Totolink X5000r OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42741 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setL2tpServerCfg. Authenicated Attackers can send malicious packet to execute arbitary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:34.000000Z"}, {"uuid": "b5884933-be60-4242-bace-9c8832e37b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42740", "type": "seen", "source": "https://t.me/cvedetector/3020", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42740 - TOTOLINK X5000r Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42740 \nPublished : Aug. 13, 2024, 2:15 p.m. | 42\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setLedCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T17:07:03.000000Z"}, {"uuid": "ce17fef3-2d19-41c6-b235-c853f5de78d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42742", "type": "seen", "source": "https://t.me/cvedetector/2895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42742 - TOTOLINK X5000r OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42742 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUrlFilterRules. Authenicated Attackers can send malicious packet to execute arbitary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:33.000000Z"}, {"uuid": "57f90306-07d1-435c-bacc-7be844642692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42744", "type": "seen", "source": "https://t.me/cvedetector/2891", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42744 - TOTOLINK X5000r Remote OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42744 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setModifyVpnUser. Authenicated Attackers can send malicious packet to execute arbitary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:26.000000Z"}, {"uuid": "dbd5f0b8-8b95-4240-957b-aedda567c033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42747", "type": "seen", "source": "https://t.me/cvedetector/2890", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42747 - TOTOLINK X5000r OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42747 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWanIeCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:25.000000Z"}, {"uuid": "fd50dea5-4e6e-48b4-a681-60dc330eabb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42745", "type": "seen", "source": "https://t.me/cvedetector/2889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42745 - TOTOLINK X5000r OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42745 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUPnPCfg. Authenicated Attackers can send malicious packet to execute arbitary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:24.000000Z"}, {"uuid": "aceedbd9-f91b-4d19-87da-e3f4374be5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42748", "type": "seen", "source": "https://t.me/cvedetector/2893", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42748 - Totolink X5000r OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42748 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWiFiWpsCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:27.000000Z"}, {"uuid": "f90ee951-b2c4-4ebd-a043-803fbf048880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42743", "type": "seen", "source": "https://t.me/cvedetector/2892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42743 - TOTOLINK X5000r Telecommand Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42743 \nPublished : Aug. 12, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setSyslogCfg . Authenicated Attackers can send malicious packet to execute arbitary commands. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-12T22:41:27.000000Z"}]}