CVE-2025-60701

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...

CVE-2025-60673

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDMZSettings' functionality, where the 'IPAddress' parameter in prog.cgi is stored in NVRAM and later used by librcm.so to construct iptables commands...

CVE-2025-60702

A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592B20191022ALL within the system.so binary. The setDiagnosisCfg function retrieves the ipDoamin parameter from user input via websGetVar and concatenates it directly into a ping system command executed via...

PT-2025-46889

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetNetworkSettings' functionality of prog.cgi, where the 'IPAddress' and 'SubnetMask' parameters are directly concatenated into shell commands executed...

PT-2025-46883

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 Router firmware versions prior to DIR882A1 FW102B02 Description A command injection issue exists in the D-Link DIR-882 Router firmware. The sub 4455BC function within the prog.cgi binary stores user-supplied...

Linksys E1200 security vulnerabilities

The Linksys E1200 is a router from Linksys USA. The Linksys E1200 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to cause the execution of arbitrary code or a denial of service...

CVE-2025-60683

A command injection vulnerability exists in the ToToLink A720R Router firmware (version V4.1.5cu.614_B20230630 ) within the sysconf binary. The flaw specifically resides in the sub_40BFA4 function, which handles network interface reinitialization from the '/var/system/linux_vlan_reinit' file. The...

PT-2025-46888

A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G V1.0.2B05 20181207.bin in the timelycheck and sysconf binaries, which process the /tmp/new qos.rule configuration file. The vulnerability occurs because parsed fields from the configuration file are concatenat...

PT-2025-46881

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 Router firmware version DIR882A1 FW102B02 Description A command injection issue exists in the D-Link DIR-882 Router firmware. The sub 4438A4 function within the prog.cgi binary stores user-provided DDNS parameters, ServerAddress...

CVE-2025-60676

...

CVE-2025-60700

A command injection vulnerability exists in the D-Link DIR-882 Router firmware (version DIR882A1_FW102B02 ) within the prog.cgi and librcm.so binaries. The root cause is a lack of input sanitization where the sub_4455BC function in prog.cgi stores user-supplied SetDMZSettings/IPAddress values in ...

CVE-2025-60685

A stack buffer overflow vulnerability exists in the ToToLink A720R Router firmware version V4.1.5cu.614_B20230630 . The flaw is located within the sysconf binary's sub_401EE0 function, where the application reads the /proc/stat file using fgets() into a local buffer and subsequently parses the da...

ASUS DSL-AC51 security vulnerabilities

ASUS DSL-AC51 is a router from Asus China. A security vulnerability exists in the ASUS DSL-AC51 that stems from an authentication bypass that could allow a remote attacker to gain unauthorized access to the system...

CVE-2025-60702: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592B20191022ALL within the system.so binary. The setDiagnosisCfg function retrieves the ipDoamin parameter from user input via websGetVar and concatenates it directly into a ping system command executed via...

CVE-2025-60700: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and librcm.so binaries. The sub4455BC function in prog.cgi stores user-supplied SetDMZSettings/IPAddress values in NVRAM via nvramsafeset"dmzipaddr", .... These values are later...

CVE-2025-60676

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

PT-2025-46846

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614 B20230630 within the sysconf binary sub 401EE0 function. The binary reads the /proc/stat file using fgets into a local buffer and subsequently parses the line using sscanf into a single-byte variable with the %s...

PT-2025-46847

An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619 B20230130 within the cstecgi.cgi binary sub 41EC68 function. The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters long. The parameter is...

CVE-2025-60701

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...

CVE-2025-60685

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the sysconf binary sub401EE0 function. The binary reads the /proc/stat file using fgets into a local buffer and subsequently parses the line using sscanf into a single-byte variable with the %s forma...