Lucene search
+L

510 matches found

CNVD
CNVD
added 2025/09/23 12:0 a.m.6 views

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23470)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameters terminaladdr/serverip/serverport in the file /usr/sbin/goahead, which can be exploited by an attacker to cause...

8.8CVSS7.9AI score0.07359EPSS
SaveExploits1References1
OSV
OSV
added 2025/09/22 9:15 p.m.6 views

CVE-2025-10814

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

8.8CVSS5.7AI score0.06115EPSS
SaveExploits1References5
NVD
NVD
added 2025/09/22 9:15 p.m.7 views

CVE-2025-10814

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

8.8CVSS0.06115EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/09/22 8:32 p.m.5 views

CVE-2025-10814 D-Link DIR-823X goahead command injection

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

6.5CVSS6.8AI score0.06115EPSS
SaveExploits1References5
CVE
CVE
added 2025/09/22 8:32 p.m.31 views

CVE-2025-10814

The CVE-2025-10814 entry concerns D-Link DIR-823X routers (versions 240126/240802/250416) with a vulnerability in /usr/sbin/goahead. An attacker can remotely inject commands by manipulating the port argument, leading to command execution. Public exploit information exists. No remediation details ...

8.8CVSS6.6AI score0.06115EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/09/22 8:32 p.m.33 views

CVE-2025-10814 D-Link DIR-823X goahead command injection

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

6.5CVSS0.06115EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.12 views

PT-2025-39076

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126/240802/250416 Description A flaw exists in D-Link DIR-823X that allows for command injection. This occurs due to manipulation of the port argument within an unknown functionality of the file /usr/sbin/goahead. T...

8.8CVSS6.2AI score0.06115EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/09/22 12:0 a.m.8 views

D-Link DIR-823X 命令注入漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability due to a flaw in the /usr/sbin/goahead file. An attacker can exploit this vulnerability to execute arbitrary commands on the system...

8.8CVSS8.1AI score0.06115EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/09/20 1:57 a.m.22 views

CVE-2025-10634

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminaladdr/serverip/serverport causes command injection. The atta...

8.8CVSS6.5AI score0.07359EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/18 2:15 a.m.19 views

CVE-2025-10634

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminaladdr/serverip/serverport causes command injection. The atta...

8.8CVSS0.07359EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/09/18 1:2 a.m.5 views

CVE-2025-10634 D-Link DIR-823X Environment Variable goahead sub_412E7C command injection

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminaladdr/serverip/serverport causes command injection. The atta...

6.5CVSS6.5AI score0.07359EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/09/18 1:2 a.m.31 views

CVE-2025-10634 D-Link DIR-823X Environment Variable goahead sub_412E7C command injection

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminaladdr/serverip/serverport causes command injection. The atta...

6.5CVSS0.07359EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/09/18 12:0 a.m.8 views

D-Link DIR-823X 安全漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameters terminaladdr/serverip/serverport in the file /usr/sbin/goahead, which can be exploited by an attacker to cause...

8.8CVSS7.8AI score0.07359EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/09/18 12:0 a.m.19 views

PT-2025-38294

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126, 240802, and 250416 Description A weakness exists in the Environment Variable Handler component of the D-Link DIR-823X router. Manipulation of the terminal addr, server ip, or server port argument within the sub...

6.5CVSS6.4AI score0.07359EPSS
SaveExploits1References11
Talos
Talos
added 2025/08/20 12:0 a.m.18 views

Tenda AC6 V5.0 HTTP Header Parsing denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2166 Tenda AC6 V5.0 HTTP Header Parsing denial of service vulnerability August 20, 2025 CVE Number CVE-2025-30256 SUMMARY A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted...

8.6CVSS7AI score0.00394EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:0 a.m.18 views

The vulnerability of the system() function in the bin/goahead software for D-Link DIR-816 A2 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the system function in the bin/goahead microprogramming software for D-Link DIR-816 A2 wireless routers is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.00891EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/27 12:19 a.m.11 views

CVE-2023-53155

goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...

7.2CVSS7.3AI score0.00524EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/25 5:15 p.m.8 views

CVE-2023-53155

goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...

7.2CVSS0.00524EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.7 views

PT-2025-30896 · Embedthis · Goahead

Name of the Vulnerable Software and Affected Versions: EmbedThis GoAhead version 2.5 Description: The software contains a flaw that allows for HTML injection through the name parameter in the goform/formTest component. Recommendations: At the moment, there is no information about a newer version...

7.2CVSS6.3AI score0.00524EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/07/25 12:0 a.m.19 views

CVE-2023-53155

goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter...

7.2CVSS0.00524EPSS
SaveExploits0References1
Rows per page
Query Builder