D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the setcassword function in D-Link DIR-823X router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the httpcasswd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

D-Link DSL-7740C xmldbc() Privilege Escalation

The vulnerability of the xmldbc function in the microprogramming software of the D-Link DSL-7740C router is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

D-Link DI-7100G Router Arbitrary Command Execution

The vulnerability of sub47F028 in D-Link DI-7100G router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

D-Link DIR-823X Router Sub Process Command Execution

The vulnerability of the sub412E7C function in the /usr/sbin/goahead file of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the /goform/deleteofflinedevice function in the microprogramming software for D-Link DIR-823X routers is related to the lack of measures taken at the control level when processing the delvalue parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the /goform/diagtraceroute function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning at the control level when processing the targetaddr parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...

D-Link DIR-868L Router Fileaccess.cgi Command Execution

The vulnerability of the fileaccess.cgi component of the D-Link DIR-868L router’s microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the preapiarg parameter. Exploiting this vulnerability allows a remote attacker to execute...

D-Link DIR-823X Router Sub_412E7C Function Arbitrary Command Execution

The vulnerability of the sub412E7C function in the /goform/setswitchsettings function of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the /goform/setwifiblacklists function in the microprogramming software for D-Link DIR-823X routers is related to the lack of measures taken at the control level when processing the macList parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

D-Link DIR-823X Router Arbitrary Command Execution

The vulnerability of the ucidel function in the /goform/deleteprohibiting function of the D-Link DIR-823X router’s microprogramming software is related to the failure to take appropriate data cleaning measures at the control level when processing the delvalue parameter. Exploitation of this...

D-Link DIR-852 Router Command Execution

The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...

CVE-2025-11303

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted...

CVE-2025-11303

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted...

CVE-2025-11303

Belkin F9K1015 (version 1.00.10) contains a command injection flaw in the /goform/mp handler via manipulation of the command argument. The vulnerability allows remote execution and is supported by multiple sources (NVD, Red Hat, Vulners enrichments, PT Security) with exploitation details publicly...

CVE-2025-11302

A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function of the file /goform/formWpsStart. Such manipulation of the argument pinCode leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used...

CVE-2025-11302

A security vulnerability has been detected in Belkin F9K1015 1.00.10. This impacts an unknown function of the file /goform/formWpsStart. Such manipulation of the argument pinCode leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used...

CVE-2025-11301

A weakness has been identified in Belkin F9K1015 1.00.10. This affects an unknown function of the file /goform/formWlanSetupWPS. This manipulation of the argument webpage causes buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be...

CVE-2025-11299

A vulnerability was identified in Belkin F9K1015 1.00.10. The affected element is an unknown function of the file /goform/formWanTcpipSetup. The manipulation of the argument pppUserName leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...

CVE-2025-11297

A vulnerability was found in Belkin F9K1015 1.00.10. This issue affects some unknown processing of the file /goform/formSetLanguage. Performing a manipulation of the argument webpage results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public an...

CVE-2025-11298

A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the argument mwanipaddr can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and m...