CVE-2025-10634

CVE-2025-10634 affects D-Link DIR-823X routers (versions 240126, 240802, 250416). The issue is in the Environment Variable Handler’s /usr/sbin/goahead component, specifically function sub_412E7C, where manipulating arguments terminal_addr/server_ip/server_port enables remote command injection. Th...

CVE-2025-10629 D-Link DIR-852 Simple Service Discovery Protocol Service cgibin ssdpcgi_main command injection

A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgimain of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service. Executing manipulation of the argument ST can lead to command injection. The attack may be performed from...

CVE-2025-10629

The CVE-2025-10629 affects D-Link DIR-852 (firmware 1.00CN B09) in the Simple Service Discovery Protocol Service, specifically the ssdpcgi_main function in htodcs/cgibin. The vulnerability arises from insufficient input filtering of the ST argument, enabling command injection and potential remote...

CVE-2025-10629 D-Link DIR-852 Simple Service Discovery Protocol Service cgibin ssdpcgi_main command injection

A vulnerability was determined in D-Link DIR-852 1.00CN B09. This issue affects the function ssdpcgimain of the file htodcs/cgibin of the component Simple Service Discovery Protocol Service. Executing manipulation of the argument ST can lead to command injection. The attack may be performed from...

CVE-2025-10628 D-Link DIR-852 Web Management hedwig.cgi command injection

A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Management Interface. Performing manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2025-10628

D-Link DIR-852 (1.00CN B09) Web Management Interface component /htdocs/cgibin/hedwig.cgi is affected by a command-injection vulnerability. The issue arises from insufficient input filtering in hedwig.cgi, enabling remote exploitation. Public exploits exist and the affected devices are noted as no...

WAVLINK WL-WN578W2 Sub Function Arbitrary Command Execution

The vulnerability of the sub409184 function /wizardrep.shtml of the WAVLINK WL-WN578W2 signal booster software is related to the failure to take measures to neutralize special elements during the processing of the selEncrypTyp parameter. Exploiting this vulnerability allows a remote attacker to...

PT-2025-38294

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126, 240802, and 250416 Description A weakness exists in the Environment Variable Handler component of the D-Link DIR-823X router. Manipulation of the terminal addr, server ip, or server port argument within the sub...

CVE-2023-49565: Improper Neutralization of Special Elements used in a Command

The cbismanager Podman container is vulnerable to remote command execution via the /api/plugins endpoint. Improper sanitization of the HTTP Headers X-FILENAME, X-PAGE, and X-FIELD allows for command injection. These headers are directly utilized within the subprocess.Popen Python function without...

TOTOLINK X6000R Sub Function Arbitrary Command Execution

The vulnerability of the sub417D74 function in the microprogrammed software of TOTOLINK X6000R routers is related to the lack of measures taken to clean data at the control level when processing the parameter filename. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

WAVLINK Sub_401C5C Function Arbitrary Command Execution

The vulnerability of the sub401C5C function firewall.cgi in the WAVLINK WL-WN578W2 signal booster software is related to the failure to take measures to neutralize specific elements when processing parameters such as pingFrmWANFilterEnabled, blockSynFloodEnabled, blockPortScanEnabled, and...

TOTOLINK X6000R Sub 410118 Arbitrary Command Execution

The vulnerability of the sub410118 function in the microprogrammed operating system of TOTOLINK X6000R relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK EX1200T Main Function Command Execution

The vulnerability of the main function in TOTOLINK EX1200T microcontroller-based routers lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-845L Router Command Execution

The vulnerability of the soapcgimain function in D-Link DIR-845L router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the pcVar3 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A3300R Router Command Execution

The vulnerability of the setDmzCfg function in TOTOLINK A3300R router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the ip parameter. Exploiting this vulnerability allows a remote attacker ...

WAVLINK WL-WN578W2 Sub Function Arbitrary Command Execution

The vulnerability of the sub401340 function /cgi-bin/login.cgi of the WAVLINK WL-WN578W2 signal booster software is related to the failure to take measures to neutralize special elements during the processing of the ipaddr parameter. Exploiting this vulnerability allows a remote attacker to execu...

CVE-2025-10619

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the...

CVE-2025-10619 sequa-ai sequa-mcp OAuth Server Discovery node-oauth-client-provider.ts redirectToAuthorization os command injection

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the...

CVE-2025-10619 sequa-ai sequa-mcp OAuth Server Discovery node-oauth-client-provider.ts redirectToAuthorization os command injection

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the...

CVE-2025-10442

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...