CVE-2026-8344

A weakness has been identified in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this vulnerability is the function sub445E7C of the file /goform/formDMZ.cgi. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

CVE-2026-44931

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd...

CVE-2026-25710: Execution with Unnecessary Privileges

The new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from multiple issues, e.g.aA compromised plasmalogin service account can chown arbitrary files in the system...

CVE-2026-44931: Allocation of Resources Without Limits or Throttling

The newly introduced RecordUsage D-Bus method https://gitlab.freedesktop.org/pwithnall/malcontent/-/blob/0.14.0/libmalcontent-timer/child-timer-service.c in malcontent-timerd allows arbitrary users in the system to slowly fill up disk space in /var/lib/malcontent-timerd...

The vulnerability of the SetDeviceSettings() function in D-Link DCS-935L wireless HD cameras’ microprogramming software allows a intruder to execute arbitrary code.

The vulnerability of the SetDeviceSettings function in D-Link DCS-935L wireless HD cameras’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-36983

D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub42EF14 of the file /bin/alphapd. The manipulation of the argument LightSensorControl leads to command injection...

CVE-2026-34675 Substance3D - Painter | Out-of-bounds Write (CWE-787)

Substance3D - Painter versions 12.0.2 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-8272

A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfilemgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-8260

A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...

EUVD-2026-29349

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2026-8346

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...

D-Link DCS-935L buffer overflow vulnerability

The D-Link DCS-935L is a network camera designed for home and small office environments. By default, it provides device configuration options through a CGI interface. The D-Link DCS-935L has a buffer overflow vulnerability. This vulnerability stems from the SetDeviceSettings function in the HNAP...

D-Link DNS-320 operating system command injection vulnerability

The D-Link DNS-320 is a dual-disk entry-level NAS network storage device launched by D-Link. The D-Link DNS-320 has an operating system command injection vulnerability. This vulnerability stems from the chown function in webfilemgr.cgi, which fails to properly filter user input. Currently, no...

D-Link DCS-932L command injection vulnerability

The D-Link DCS-932L is a home-use infrared wireless network camera launched by D-Link in 2012. The D-Link DCS-932L has a command injection vulnerability. This vulnerability stems from the sub42EF14 function in the /bin/alphapd file, which fails to properly handle the LightSensorControl parameter...

D-Link DNS-320 Operating System Command Injection Vulnerability (CNVD-2026-32583)

The D-Link DNS-320 is a dual-disk entry-level NAS network storage device launched by D-Link. The D-Link DNS-320 has an operating system command injection vulnerability. This vulnerability stems from multiple functions in the file/cgi-bin/networkmgr.cgi failing to properly validate user input...

CVE-2026-8346: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...

D-Link DIR-816 注入漏洞

The D-Link DIR-816 is a wireless router produced by D-Link Corporation. The D-Link DIR-816 1.10CNB05R1B011D88210 version has a vulnerability related to command injection, which stems from operations on the ipaddress parameter...

CVE-2026-8345

A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...

CVE-2026-8346

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...

CVE-2026-8346 D-Link DIR-816 portForward command injection

A vulnerability was detected in D-Link DIR-816 1.10CNB05R1B011D88210. This affects the function portForward. Performing a manipulation of the argument ipaddress results in command injection. The attack can be initiated remotely. The exploit is now public and may be used...