Realtek rtl819x-SDK before v3.6.1 allows command injection over the web interface.
realtek rtl819x software development kit