CVE-2023-45572

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...

EUVD-2023-49867

Malicious code in bioql PyPI...

EUVD-2025-19519

Malicious code in bioql PyPI...

EUVD-2025-19516

Malicious code in bioql PyPI...

D-Link DI-7300G+ Command Injection Vulnerability

The D-Link DI-7300G+ is a ruggedized, enterprise-grade smart gateway from China-based D-Link. The D-Link DI-7300G+ suffers from a command injection vulnerability that is caused by a flaw in httpddebug.asp. An attacker can exploit this vulnerability to execute arbitrary operating system commands o...

CVE-2025-6896

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wgettest.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-6898

A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxyclient.asp. The manipulation of the argument proxysrv/proxylanport/proxylanip/proxysrvport leads to os command injection. The...

CVE-2025-6898

A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxyclient.asp. The manipulation of the argument proxysrv/proxylanport/proxylanip/proxysrvport leads to os command injection. The...

CVE-2025-6897

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpddebug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used...

CVE-2025-6898 D-Link DI-7300G+ in proxy_client.asp os command injection

A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxyclient.asp. The manipulation of the argument proxysrv/proxylanport/proxylanip/proxysrvport leads to os command injection. The...

CVE-2025-6897 D-Link DI-7300G+ httpd_debug.asp os command injection

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpddebug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used...

CVE-2025-6897 D-Link DI-7300G+ httpd_debug.asp os command injection

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpddebug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used...

CVE-2025-6896

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wgettest.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-6896 D-Link DI-7300G+ wget_test.asp os command injection

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wgettest.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-6896 D-Link DI-7300G+ wget_test.asp os command injection

A vulnerability classified as critical has been found in D-Link DI-7300G+ 19.12.25A1. Affected is an unknown function of the file wgettest.asp. The manipulation of the argument url leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

D-Link DI-7300G+ 命令注入漏洞

The D-Link DI-7300G+ is a ruggedized enterprise-grade smart gateway from China's AUO D-Link. A command injection vulnerability exists in the D-Link DI-7300G+ version 19.12.25A1, which stems from the incorrect operation of the parameter url in the file wgettest.asp resulting in os command injectio...

D-Link DI-7300G+ 安全漏洞

The D-Link DI-7300G+ is a ruggedized, enterprise-grade smart gateway from China-based AUO D-Link. A security vulnerability exists in D-Link DI-7300G+ version 19.12.25A1 and DI-8200G version 17.12.20A1, which originates from os command injection due to incorrect operation of the parameters flag, c...

D-Link DI-7300G+ 安全漏洞

The D-Link DI-7300G+ is a ruggedized, enterprise-grade smart gateway from China-based D-Link. The D-Link DI-7300G+ suffers from a command injection vulnerability that is caused by a flaw in httpddebug.asp. An attacker can exploit this vulnerability to execute arbitrary operating system commands o...

D-Link DI-7300G+ 命令注入漏洞

D-Link DI-7300G+ is a ruggedized enterprise-grade smart gateway from China AUO D-Link. A command injection vulnerability exists in the D-Link DI-7300G+ version 19.12.25A1, which stems from the incorrect operation of the parameters proxysrv, proxylanport, proxylanip, and proxysrvport in the file...

PT-2025-27421 · D Link · D-Link Di-7300G+

Name of the Vulnerable Software and Affected Versions: D-Link DI-7300G+ version 19.12.25A1 Description: A critical issue was found in the httpd debug.asp file, where the manipulation of the Time argument leads to os command injection. The exploit has been disclosed to the public and may be used...