CVE-2026-93958

D-Link R95 BE9500 Wi-Fi 7 스마트 라우터 제조사：D-Link 제품：R95 제품 모델：BE9500 펌웨어 버전：1.01B06 취약점 유형：인증된 명령 주입 설명 D-Link R95 BE9500 Wi-Fi 7 스마트 라우터펌웨어 버전 BE95001.00.16는 SetTimeSettings 요청을 처리할 때 DHMAPISOAP over HTTPS 인터페이스에 명령 주입 취약점이 존재합니다. 사용자가 제어하는 필드는 셸 메타문자에 대한 어떠한 정제나 검증도 없이 구성 데이터베이스에 저장됩니다. 이후 구성이...

The vulnerability of the /bin/ssi file in the DHMAPI component of D-Link R95 router software allows a hacker to execute arbitrary code and completely compromise the device.

The vulnerability of the /bin/ssi file of the DHMAPI component in D-Link R95 router microprogramming software is related to the lack of measures taken to neutralize special elements in the NTPServer parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code,...

Exploit for CVE-2026-93958

CVE-2026-93958 — D-Link R95 BE9500 DHMAPI / NTPServer Pytho...

CVE-2026-93958

A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-93958 D-Link R95 DHMAPI ssi system os command injection

A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-93958 D-Link R95 DHMAPI ssi system os command injection

A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-93958

CVE-2026-93958 is an OS command injection vulnerability in the D-Link R95 router (firmware BE9500_1.00.16). The flaw resides in the DHMAPI component, specifically the system function within the file /bin/ssi. By manipulating the NTPServer argument, an attacker can inject arbitrary operating-syste...

EUVD-2026-83637

A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...

CVE-2026-93958: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...

The vulnerability of the fromSetSysTime() function in Tenda AC6 router software allows a hacker to execute arbitrary code.

The vulnerability of the fromSetSysTime function in Tenda AC6 router software lies in the copying of buffers without checking the size of the input data when processing the ntpServer parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EUVD-2018-10448

Malware in sbrugna...

EUVD-2018-18578

Malware in sbrugna...

EUVD-2022-30110

Malicious code in bioql PyPI...

Tenda AC6 fromSetSysTime function ntpServer parameter buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability that originates from the ntpServer parameter in the...

CVE-2025-55603

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...

Tenda Ax3 安全漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a buffer overflow vulnerability, which stems from the ntpServer parameter in the...

CVE-2025-55603: Buffer Copy without Checking Size of Input

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...

CVE-2025-55499

Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function...

CVE-2025-55499

Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function...

CVE-2025-55499: Buffer Copy without Checking Size of Input

Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function...