1417 matches found
CVE-2025-60698
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...
CVE-2025-60701
A command injection vulnerability exists in the D-Link DIR-882 Router firmware version DIR882A1_FW102B02 within the prog.cgi and rc binaries. The vulnerability occurs because the sub_433188 function in prog.cgi stores user-supplied email configuration parameters (such as EmailFrom and AccountName...
CVE-2025-60698
A command injection vulnerability exists in the D-Link DIR-882 Router firmware version DIR882A1_FW102B02 . The issue stems from the sub_432F60 function in the prog.cgi binary, which stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvram_safe_set. These values are subsequently ...
D-Link DIR-882 security vulnerabilities
The D-Link DIR-882 is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-882 DIR882A1FW102B02 version, which originates from a command injection in the prog.cgi and rc binaries, which could lead to the execution of arbitrary commands...
CVE-2025-60701: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...
CVE-2025-60674: Stack-based Buffer Overflow
A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127...
CVE-2025-60697: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub4438A4 function in prog.cgi stores user-supplied DDNS parameters ServerAddress and Hostname in NVRAM via nvramsafeset. These values are later retrieved in th...
CVE-2025-60698: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub432F60 function in prog.cgi stores user-supplied SetSysLogSettings/IPAddress values in NVRAM via nvramsafeset"SysLogRemoteIPAddress", .... These values are...
Malicious code in dajouka-scelas-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2f38a3449ea54ac9a292683799d52e4f9b6eb0bcdcfeb1e35e297d1477d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tear-grsass-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0377406bb501ec4db1d72bc0638517db433489afb8d16925e2b42f1234bd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tear-slas-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec940c8e6c7204eb4f93c58fa68cf01eb19e3dd74af78acbce4b397570c8a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-147999
Malicious code in tear-grsdas-rc npm...
EUVD-2025-147992
Malicious code in tear-rcbt-rc npm...
Malicious code in tear-grsdas-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d08680c63d6dd5037040ea8bfce9dec930dda5ff1f067d7d7751a7ac7de95cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-154181 Malicious code in dajouka-scelas-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2f38a3449ea54ac9a292683799d52e4f9b6eb0bcdcfeb1e35e297d1477d765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-154188 Malicious code in dajouka-slas-rc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf12e201d68c30872e143f1bc118d39fae77f4184300466777a2680fe89a14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-148000
Malicious code in tear-grsass-rc npm...
EUVD-2025-147998
Malicious code in tear-hfsips-rc npm...