https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 21:54:56 +0000 https://vulnerability.circl.lu/vuln/cve-2025-34152 <p><strong>Affected:</strong> Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater</p> <p>An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the &#39;time&#39; parameter of the &#39;/protocol.csp?&#39; endpoint. The input is processed by the internal date &#39;-s&#39; command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.</p> <p><strong>Affected:</strong> Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater</p> <p>An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the &#39;time&#39; parameter of the &#39;/protocol.csp?&#39; endpoint. The input is processed by the internal date &#39;-s&#39; command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.</p> https://vulnerability.circl.lu/vuln/cve-2025-34152