Shibby vulnerabilities
We track 19 vulnerabilities in Shibby products. 19 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
Latest Shibby vulnerabilities
- 7.2 High severity
Tomato: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom results in os command injection. The attack may be launched remotely. The exploit
- 7.2 High severity
Tomato: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by this issue is the function new_qoslimit_start of the file /etc/qoslimit. The manipulation of the argument new_qoslimit_enable leads to os command injection. The attack may be initiated remo
- 7.2 High severity
Tomato: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by this vulnerability is the function new_qoslimit_stop of the file /tmp/qoslimittc_stop.sh. Executing a manipulation of the argument wan_iface can lead to os command injection. The attack can
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Scheduler Name Handler. The manipulation of the argument a1 results in stack-based buffer overflow. It is possible to launch the attack remotel
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. This affects the function sub_40BB50 of the file /proc/webmon_recent_domains. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be perform
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Shibby Tomato up to 1.28.0000. This vulnerability affects the function sub_407220 of the file /usr/sbin/httpd of the component DNS List Rendering. The manipulation leads to stack-based buffer overflow. The attack i
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Shibby Tomato up to 1.28.0000. Affected by this vulnerability is the function main of the file www/apcupsd/tomatodata.cgi of the component apcupsd. Such manipulation leads to out-of-bounds write. The attack may be launched rem
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overflow. The attack may be i
- 7.2 High severity
Tomato: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Shibby Tomato 1.28.0000. Impacted is the function rstats_path of the file /bin/rstats of the component Web UI. Executing a manipulation can lead to os command injection. The attack can be launched remotely. The exploit has bee
- 7.2 High severity
Tomato: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Shibby Tomato 1.28.0000. This issue affects the function start_vpnserver of the file /sbin/rc of the component Web UI. Performing a manipulation results in os command injection. The attack can be initiated remotely. The exploit has
- 7.2 High severity
Tomato: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Shibby Tomato 1.28.0000. This vulnerability affects the function start_6rd_tunnel of the file /sbin/rc of the component Web UI. Such manipulation of the argument ipv6_6rd_borderrelay leads to os command injection. It is possib
- 7.2 High severity
Tomato: Improper Neutralization of Special Elements used in a Command
A flaw has been found in Shibby Tomato 1.28.0000. This affects the function start_dhcpc of the file /sbin/rc of the component Web UI. This manipulation causes os command injection. It is possible to initiate the attack remotely. The exploit has been published
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in Shibby Tomato up to 1.28. Affected is the function rip_zebra_read_ipv4 of the file /usr/sbin/ripd of the component Zserv Handler. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the a
- 7.5 High severity
Tomato: Uncontrolled Resource Consumption
A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. T
- 7.3 High severity
Tomato: Server-Side Request Forgery
A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation causes server-side request forgery. The attack may be initiated remotely. This proj
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Shibby Tomato 1.28. Impacted is the function sub_90F0 of the file multimon.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. This project is superseded by FreshTomato. This vulner
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub_9068 of the file tomatoups.cgi of the component UPS Service. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely
- 8.8 High severity
Tomato: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function get_ups_field of the file tomatodata.cgi. Executing a manipulation of the argument Date can lead to stack-based buffer overflow. It is possible to launch the attack r