PT-2025-39204

Name of the Vulnerable Software and Affected Versions D-Link DI-7100G affected versions not specified Description A buffer overflow issue exists in the jhttpd service of the D-Link DI-7100G. The issue is located within the sub 451754 function and involves the viav4 parameter. Successful...

D-Link DIR-852 cgibin file command injection vulnerability

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from a command injection vulnerability that originates from the parameter ST of the component Simple Servi...

D-Link DI-7100G security vulnerabilities

D-Link DI-7100G is an Internet Behavior Management router for SMBs, supporting Gigabit network transfer rate some models are labeled as 100 Gigabit, equipped with 4 WAN interfaces and 1 LAN interface, built-in USB2.0 ports, and compliant with IEEE802.11n/g/b wireless standard and IEEE802.3 wired...

D-Link DI-7100G security vulnerabilities

D-Link DI-7100G is an Internet Behavior Management router for SMBs, supporting Gigabit network transfer rate some models are labeled as 100 Gigabit, equipped with 4 WAN interfaces and 1 LAN interface, built-in USB2.0 ports, and compliant with IEEE802.11n/g/b wireless standard and IEEE802.3 wired...

CVE-2025-57637

Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub451754 function of the jhttpd service in the viav4 parameter allowing attackers to cause a denial of service or execute arbitrary code...

CVE-2025-57637: Heap-based Buffer Overflow

Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub451754 function of the jhttpd service in the viav4 parameter allowing attackers to cause a denial of service or execute arbitrary code...

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23470)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameters terminaladdr/serverip/serverport in the file /usr/sbin/goahead, which can be exploited by an attacker to cause...

CVE-2025-57636

The D-Link C1 (versions prior to 2020-02-21 ) and the D-Link DI-7100G router are vulnerable to an OS Command injection vulnerability. The issue resides in the jhttpd component's sub_47F028 function, which fails to properly neutralize special elements in the "time" HTTP parameter. A remote attacke...

CVE-2025-57636: Improper Neutralization of Special Elements used in an OS Command

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...

CVE-2025-57636

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...

CVE-2025-57636

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...

PT-2025-39210

Name of the Vulnerable Software and Affected Versions D-Link C1 versions prior to 2020-02-21 Description A command injection issue exists in the jhttpd component of the D-Link C1. The sub 47F028 function is susceptible to command injection through the time HTTP parameter. This allows for potentia...

CVE-2025-10814

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-10814

The CVE-2025-10814 entry concerns D-Link DIR-823X routers (versions 240126/240802/250416) with a vulnerability in /usr/sbin/goahead. An attacker can remotely inject commands by manipulating the port argument, leading to command execution. Public exploit information exists. No remediation details ...

CVE-2025-10814 D-Link DIR-823X goahead command injection

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-10814 D-Link DIR-823X goahead command injection

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-10809

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-10809 Campcodes Online Learning Management System department.php sql injection

A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2025-10792

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2025-10792

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...