Lucene search
+L

1017 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2022-39658

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00569EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-32221

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00118EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/28 5:15 a.m.•13 views

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

8.8CVSS5.6AI score0.04125EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/28 5:15 a.m.•17 views

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

8.8CVSS0.04125EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/28 4:32 a.m.•6 views

CVE-2025-11096 D-Link DIR-823X diag_traceroute command injection

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.7AI score0.04125EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/28 4:32 a.m.•40 views

CVE-2025-11096 D-Link DIR-823X diag_traceroute command injection

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS0.04125EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•15 views

D-Link DIR-823X 命令注入漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameter targetaddr in the file /goform/diagtraceroute, which can be exploited by an attacker to cause remote command injectio...

8.8CVSS7.7AI score0.04125EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/09/22 12:00 a.m.•15 views

The vulnerability of the /goform/diag_ping file in the D-link DIR-823X router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the /goform/diagping file in the microprogramming software for D-link DIR-823X routers is related to the failure to eliminate special elements during the processing of the targetaddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

6.5CVSS6.9AI score0.08549EPSS
SaveExploits1References6Affected Software1
NVD
NVD
•added 2025/09/18 4:15 p.m.•17 views

CVE-2023-53426

In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xskdiag use-after-free error during socket cleanup Fix a use-after-free error that is possible if the xskdiag interface is used after the socket has been unbound from the device. This can happen either due to the socket...

7.8CVSS0.00155EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/09/18 4:04 p.m.•8 views

CVE-2023-53426 xsk: Fix xsk_diag use-after-free error during socket cleanup

In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xskdiag use-after-free error during socket cleanup Fix a use-after-free error that is possible if the xskdiag interface is used after the socket has been unbound from the device. This can happen either due to the socket...

6.3AI score0.00155EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/09/18 12:00 a.m.•17 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse error in the xskdiag interface during socket cleanup...

7.8CVSS5.9AI score0.00155EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/09/16 7:24 p.m.•15 views

CVE-2025-10401

A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diagping. Performing manipulation of the argument targetaddr results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may...

8.8CVSS6.8AI score0.08549EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/09/16 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-53205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for...

7.8CVSS6.3AI score0.0017EPSS
SaveExploits0References3
OSV
OSV
•added 2025/09/15 3:15 p.m.•9 views

DEBIAN-CVE-2023-53205

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid...

7.8CVSS5.8AI score0.0017EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/15 3:15 p.m.•17 views

CVE-2023-53205

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid...

7.8CVSS0.0017EPSS
SaveExploits0References4
OSV
OSV
•added 2025/09/15 3:15 p.m.•16 views

UBUNTU-CVE-2023-53205

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid...

7.8CVSS6.3AI score0.0017EPSS
SaveExploits0References7
CVE
CVE
•added 2025/09/15 2:21 p.m.•52 views

CVE-2023-53205

CVE-2023-53205 affects the Linux kernel KVM on s390, specifically the diag 9c handler where a race exists around the target CPU value (-1). The fix stores the physical target CPU in a local variable to prevent out-of-bounds accesses to CPU arrays. The CVE’s risk is described as high (CVSS v3.1: A...

7.8CVSS6.3AI score0.0017EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/09/15 2:21 p.m.•8 views

CVE-2023-53205 KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid...

7.3CVSS5.7AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/09/15 2:21 p.m.•26 views

CVE-2023-53205 KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid...

7.3CVSS0.0017EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•3 views

CVE-2023-53205: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid...

7.8CVSS5.8AI score0.0017EPSS
SaveExploits0References6
Rows per page
Query Builder