Aug. 1, 2023, 2:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

A Command injection vulnerability in RaspAP 2.8.0 thru 2.9.2 allows an authenticated attacker to execute arbitrary OS commands as root via the "entity" POST parameters in /ajax/networking/get_wgkey.php.

command command injection cve injection networking php post parameters root vulnerability

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Cyber Crime Student Internship

@ West Midlands Police | Birmingham, West Midlands, United Kingdom

Cyber Security Engineer (Junior/Journeyman)

@ CSEngineering | El Segundo, CA 90245, USA

Application Security Lead

@ Tokio Marine HCC | United Kingdom