2595 matches found
CLSA-2025-1755271152 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: prevent --dump-bin from overwriting local files to address privilege escalation vulnerability...
CVE-2025-9026
CVE-2025-9026 affects D-Link DIR-860L (firmware 2.04.B04). The vulnerability is in the Simple Service Discovery Protocol component, specifically the ssdpcgi_main function in htdocs/cgibin, enabling remote OS command injection. Publicly disclosed exploit indicates active risk, with impact on confi...
Malicious code in pngquant-bin-static (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-9828 Malicious code in @zalastax/nolb-_bin (npm)
The package @zalastax/nolb-bin was found to contain malicious code...
Malicious code in yadi-bin (npm)
The package yadi-bin was found to contain malicious code...
MAL-2025-40111 Malicious code in yadi-bin (npm)
The package yadi-bin was found to contain malicious code...
CLSA-2025-1755008582 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: do not let --dump-bin overwrite an existing file...
CLSA-2025-1755004236 dmidecode: Fix of CVE-2023-30630
CVE-2023-30630: do not let --dump-bin overwrite an existing file...
The vulnerability of the system() function in the bin/goahead software for D-Link DIR-816 A2 wireless routers allows a hacker to execute arbitrary code.
The vulnerability of the system function in the bin/goahead microprogramming software for D-Link DIR-816 A2 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddnsenc.cgi. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...
The vulnerability of the cs_dsp_mock_bin_bin_add_name_or_info() function in the drivers/firmware/cirrus/test/cs_dspMockBin.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the csdspmockbinbinaddnameorinfo function in the drivers/firmware/cirrus/test/csdspMockBin.c module of the Linux kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
TOTOLINK T6 访问控制错误漏洞
TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a lack of authentication vulnerability that stems from the setTelnetCfg function of the /cgi-bin/cstecgi.cgi file in the component...
TOTOLINK T6 setTracerouteCfg function Command Injection Vulnerability
TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that originates from the failure of the parameter command of the function setTracerouteCfg in the fi...
TOTOLINK T6 安全漏洞
TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a buffer overflow vulnerability, which originates from the parameter ip in the file /cgi-bin/cstecgi.cgi that fails to correctly...
Debian dsa-5962 : gnutls-bin - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5962 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5962-1 [email protected] https://www.debian.org/securit...
CVE-2025-7525
A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument command leads to command injectio...
VulnCheck KEV: CVE-2024-0297
A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to os command injection. The attack may be initiated remotely. The...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an out-of-bounds memory read in the csdspmockbinaddnameorinfo function...
D-Link DIR-816 A2 Code Execution Vulnerability
The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2 suffers from a code execution vulnerability that originates from an unverified system function in the bin/goahead file, which can be exploited by an attacker to cause remote code execution...
