EUVD-2006-5084

Malware in sbrugna...

PT-2025-41004

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple OS command injection flaws exist in the swctrl functionality. A crafted network request can result in arbitrary command execution. The new password request parameter is involved in...

PT-2025-41179

Name of the Vulnerable Software and Affected Versions D-Link DI-7001 MINI version 24.04.18B1 Description A flaw exists in D-Link DI-7001 MINI version 24.04.18B1. The issue involves manipulation of the path argument within the file /upgrade filter.asp, leading to os command injection. This...

CVE-2025-11298

A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the argument mwanipaddr can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and m...

CVE-2025-11292

A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...

CVE-2025-11335

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

EUVD-2025-32533

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

Patch Now: Dell UnityVSA Flaw Allows Command Execution Without Login

WatchTowr finds a serious flaw in Dell UnityVSA CVE-2025-36604 letting attackers run commands without login. Dell issues patch 5.5.1 - update now...

CVE-2025-11331

A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the setcassword function in D-Link DIR-823X router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the httpcasswd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2025-40892

Name of the Vulnerable Software and Affected Versions D-Link DI-7100G C1 versions up to 20250928 Description A flaw exists in D-Link DI-7100G C1 that allows for remote command injection. This is due to the manipulation of the iface argument within the sub 46409C function of the /msp...

D-Link DI-7100G Router Arbitrary Command Execution

The vulnerability of sub47F028 in D-Link DI-7100G router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-823X Router Sub Process Command Execution

The vulnerability of the sub412E7C function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

D-link DIR-823X Router Arbitrary Command Execution

The vulnerability of the uciset function in D-link DIR-823X router microprogramming software is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the ucidel function in the /goform/deleteprohibiting function of the D-Link DIR-823X router’s microprogramming software is related to the failure to take appropriate data cleaning measures at the control level when processing the delvalue parameter. Exploitation of this...

D-Link DIR-852 Router Arbitrary Command Execution

The vulnerability of the ssdpcgimain function in the htodcs/cgibin module of the D-Link DIR-852 router’s microprogramming system is related to the lack of measures taken at the control level to manage data cleanup. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

D-Link DIR-868L Router Fileaccess.cgi Command Execution

The vulnerability of the fileaccess.cgi component of the D-Link DIR-868L router’s microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the preapiarg parameter. Exploiting this vulnerability allows a remote attacker to execute...

PT-2025-40888

Name of the Vulnerable Software and Affected Versions IdeaCMS versions up to 1.8 Description A command injection issue exists in IdeaCMS. The issue is located in an unknown function within the app/common/logic/admin/Config.php file of the Website Name Handler component. Manipulation of the 网站名称...

CVE-2025-11303

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted...

CVE-2025-11303

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted...