Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2025-343-01)

The version of mozilla-firefox installed on the remote host is prior to 140.6.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-343-01 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

EUVD-2025-200948

Malicious code in elf-stats-cheery-bell-343 npm...

Malicious code in elf-stats-cheery-bell-343 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205068082d6811336049a61011c238fff6e90c745d45eb169fab94c4a951d282 The package elf-stats-cheery-bell-343 was found to contain malicious code...

MAL-2025-192003 Malicious code in elf-stats-cheery-bell-343 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205068082d6811336049a61011c238fff6e90c745d45eb169fab94c4a951d282 The package elf-stats-cheery-bell-343 was found to contain malicious code...

CVE-2018-25120

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

EUVD-2018-21606

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

CVE-2018-25120

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

CVE-2018-25120

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

CVE-2018-25120

The CVE-2018-25120 entry concerns D-Link DNS-343 ShareCenter devices (firmware ≤ 1.05). The vulnerability is a command injection in the Mail Test feature: the web maintenance script posts to /goform/Mail_Test and feeds multiple form parameters directly into a system email utility without input va...

CVE-2018-25120 D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

CVE-2018-25120 D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

PT-2025-44344

Name of the Vulnerable Software and Affected Versions D-Link DNS-343 ShareCenter versions up to and including 1.05 Description D-Link DNS-343 ShareCenter devices with firmware up to version 1.05 have a command injection issue in the Mail Test functionality. The web maintenance script utilizes the...

CVE-2018-25120: Improper Neutralization of Special Elements used in an OS Command

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

D-Link DNS-343 ShareCenter 安全漏洞

The D-Link DNS-343 ShareCenter is a network storage device from China's AUO D-Link. The D-Link DNS-343 ShareCenter suffers from a command execution vulnerability that stems from insufficient input validation in the Mail Test feature, which can be exploited by an attacker to execute arbitrary...

VulnCheck KEV: CVE-2018-25120

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

Siemens CP343-1 Devices Improper Verification of Source of a Communication Channel (CVE-2023-51440)

A vulnerability has been identified in SIMATIC CP 343-1 6GK7343-1EX30-0XE0 All versions, SIMATIC CP 343-1 Lean 6GK7343-1CX10-0XE0 All versions, SIPLUS NET CP 343-1 6AG1343-1EX30-7XE0 All versions, SIPLUS NET CP 343-1 Lean 6AG1343-1CX10-2XE0 All versions. Affected products incorrectly validate TCP...

CVE-2024-8213

A vulnerability classified as critical has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814. Affected is th...

CVE-2024-8214

CVE-2024-8214 affects a range of D-Link NAS devices (DNS-120, DNS-320 series, DNS-315L, DNS-321, etc.) up to 20240814. The vulnerability resides in the CGI function cgi_FMT_Std2R5_2nd_DiskMGR within /cgi-bin/hd_config.cgi, where manipulating the f_source_dev parameter enables remote command injec...

CVE-2024-8212

CVE-2024-8212 affects several D-Link NAS/NVR models (DNS-120, DNR-202L, DNS-315L, DNS-320/320L/320LW/321, DNR-322L, DNS-323/325/326/327L, DNR-326, DNS-340L, DNS-343/345, DNS-726-4, DNS-1100-4, DNS-1200-05, DNS-1550-04) up to 2024-08-14. The vulnerability resides in function cgi_FMT_R12R5_2nd_Disk...

D-Link多款产品 命令注入漏洞

D-Link DNS-320 and others are products of China-based AUO D-Link.D-Link DNS-320 is a NAS Network Attached Storage device.D-Link DNS-120 is a Network Storage Adapter.D-Link DNS-315L is a Network Attached Storage.D-Link DNS-315L is a Network Attached Storage.D-Link DNS-320 is a Network Attached...