12 matches found
D-Link DIR-823X set_prohibiting - Command Injection
D-Link DIR-823X 240126 and 240802 contain a command injection caused by sending a POST request to /goform/setprohibiting, letting an authorized attacker execute arbitrary commands remotely, exploit requires attacker to be authorized. id: CVE-2025-29635 info: name: D-Link DIR-823X setprohibiting -...
CVE-2023-29635
File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload...
CVE-2025-29635
creationtimestamp| type| source ---|---|--- 2025-03-25 13:23:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8651 2025-03-25 16:49:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll7q2zfffq2j 2025-03-25 17:30:48+00:00| published-proof-of-concept|...
CVE-2025-29635
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...
CVE-2025-29635
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...
CVE-2021-29635
creationtimestamp| type| source ---|---|--- 2024-02-15 07:21:53+00:00| seen| https://t.me/ctinow/185277...
CVE-2023-29635
creationtimestamp| type| source ---|---|--- 2023-05-01 20:29:47+00:00| seen| https://t.me/cibsecurity/63134...
CVE-2023-29635
File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload...
CVE-2023-29635
CVE-2023-29635 affects Antabot White-Jotter v0.2.2. The issue is a file upload vulnerability where an attacker can supply a crafted file to the coversUpload function, enabling remote code execution. The CVSS 3.1 metrics indicate NETWORK attack vector, NONE privileges required, and high impact to ...
CVE-2023-29635
File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload...