Lucene search
+L

25306 matches found

OSV
OSV
•added 2026/01/09 12:15 a.m.•17 views

CVE-2026-0732

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS6.2AI score0.11651EPSS
SaveExploits1References6
NVD
NVD
•added 2026/01/09 12:15 a.m.•19 views

CVE-2026-0732

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS0.11651EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•13 views

D-Link DI-8200G 命令注入漏洞

The D-Link DI-8200G is an enterprise router from China-based AUO D-Link. The D-Link DI-8200G suffers from a command injection vulnerability due to manipulation of a path parameter in an unknown function in the /upgradefilter.asp file. An attacker could exploit this vulnerability to execute...

9.8CVSS6.8AI score0.11651EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/01/09 12:00 a.m.•55 views

CVE-2025-69542

A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in the lease renewal processing logic where the DHCP hostname parameter is directly concatenated into a system command without proper sanitization. When a DHCP...

0.09747EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•23 views

PT-2026-1852

Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session...

8.5CVSS7AI score0.00203EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•5 views

CVE-2025-69542: Improper Neutralization of Special Elements used in a Command

A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in the lease renewal processing logic where the DHCP hostname parameter is directly concatenated into a system command without proper sanitization. When a DHCP...

9.8CVSS6AI score0.09747EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/09 12:00 a.m.•4 views

CVE-2026-0732: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

9.8CVSS6.6AI score0.11651EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•23 views

PT-2026-1954

Name of the Vulnerable Software and Affected Versions D-Link DIR895LA1 version 102b07 Description A command injection issue exists in the DHCP daemon service. The problem is in how lease renewals are handled, specifically where the DHCP hostname parameter is used in system commands without...

9.8CVSS7.5AI score0.09747EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2026/01/09 12:00 a.m.•18 views

D-Link DIR895LA1 安全漏洞

The D-Link DIR895LA1 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR895LA1 version v102b07, which stems from improper cleaning of the DHCP hostname parameter, which could lead to a command injection attack...

9.8CVSS7.3AI score0.09747EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/01/09 12:00 a.m.•26 views

PT-2026-3398

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in D-Link DIR-823X 250416 that allows for command injection. This occurs due to a manipulation of the wd enable argument within the sub 412E7C function of the /goform/set wifidog setting...

9.8CVSS7.2AI score0.1574EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
•added 2026/01/09 12:00 a.m.•31 views

The vulnerability of software for the design, operation, and maintenance of technological installations—including COMOS, Simcenter 3D, and Simcenter Femap—is related to errors in the authentication process. These errors allow attackers to carry out “man-in-the-middle” attacks.

The vulnerabilities of the software for designing, operating, and maintaining technological installations—COMOS, Simcenter 3D, and Simcenter Femap—are related to errors in the authentication process. Exploiting these vulnerabilities can allow a remote attacker to carry out a “man-in-the-middle”...

8.1CVSS7.4AI score0.00263EPSS
SaveExploits0References3Affected Software4
Cvelist
Cvelist
•added 2026/01/08 11:32 p.m.•53 views

CVE-2026-0732 D-Link DI-8200G upgrade_filter.asp command injection

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

6.5CVSS0.11651EPSS
SaveExploits1References6
CVE
CVE
•added 2026/01/08 11:32 p.m.•112 views

CVE-2026-0732

CVE-2026-0732 affects D-Link DI-8200G (v17.12.20A1). Description: manipulation of the path parameter in the file /upgrade_filter.asp leads to a remote command injection. Exploit publicly released; attacker could trigger from remote network. Affected component is the upgrade_filter.asp function ha...

9.8CVSS6.6AI score0.11651EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/08 11:32 p.m.•10 views

CVE-2026-0732 D-Link DI-8200G upgrade_filter.asp command injection

A vulnerability was found in D-Link DI-8200G 17.12.20A1. This affects an unknown function of the file /upgradefilter.asp. The manipulation of the argument path results in command injection. The attack may be performed from remote. The exploit has been made public and could be used...

6.5CVSS6.6AI score0.11651EPSS
SaveExploits1References6
NVD
NVD
•added 2026/01/08 7:15 p.m.•22 views

CVE-2025-65731

An issue was discovered in D-Link Router DIR-605L Hardware version F1; Firmware version: V6.02CN02 allowing an attacker with physical access to the UART pins to execute arbitrary commands due to presence of root terminal access on a serial interface without proper access control...

6.8CVSS0.00429EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2026/01/08 3:23 p.m.•27 views

CVE-2025-67858

A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating the JSON configuration passed to nft. This issue affects Foomuuri: from ? before 0.31...

7CVSS5.9AI score0.00188EPSS
SaveExploits0
Mend
Mend
•added 2026/01/08 2:52 p.m.•4 views

CVE-2026-22041

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2026/01/08 12:00 a.m.•5 views

CVE-2025-65731

An issue was discovered in D-Link Router DIR-605L Hardware version F1; Firmware version: V6.02CN02 allowing an attacker with physical access to the UART pins to execute arbitrary commands due to presence of root terminal access on a serial interface without proper access control...

7.2AI score0.00429EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/01/08 12:00 a.m.•22 views

FLIR Thermal Camera 信任管理问题漏洞

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR, USA. A trust management issue vulnerability exists in FLIR Thermal Camera F/FC/PT/D version 8.0.0.64, which stems from the presence of hard-coded SSH credentials that could lead to unauthorized remote acces...

9.3CVSS6.8AI score0.00329EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•24 views

PT-2026-1849

Name of the Vulnerable Software and Affected Versions D-Link Router DIR-605L version V6.02CN02 Hardware version F1 Description An issue exists in D-Link Router DIR-605L that allows an attacker with physical access to the UART pins to execute arbitrary commands. This is due to the presence of root...

6.8CVSS6.8AI score0.00429EPSS
SaveExploits1References7
Rows per page
Query Builder