CVE-2025-41014

CVE-2025-41014 affects TCMAN GIM v11 (version 20250304). Affected component: the web service at /WS/PDAWebService.asmx, using the parameter pda:username with soapaction GetLastDatePasswordChange. Root cause is user enumeration via an unauthenticated request, enabling determination of whether a us...

CVE-2025-41012 Unauthorized access vulnerability in TCMAN GIM

Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'...

CVE-2025-41015: Exposure of Sensitive Information to an Unauthorized Actor

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in...

CVE-2025-41014: Exposure of Sensitive Information to an Unauthorized Actor

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...

CVE-2025-41012: Missing Authorization

Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'...

CVE-2025-63932

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...

PT-2025-47527

Name of the Vulnerable Software and Affected Versions D-Link Router DIR-868L version FW106KRb01 Description The D-Link Router DIR-868L version FW106KRb01 contains a remote code execution issue in the cgibin binary. The HNAP service within cgibin does not properly filter the HTTP SOAPAction header...

CVE-2025-63932

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...

CVE-2025-63932: Improper Neutralization of Special Elements used in an OS Command

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...

D-Link Router 安全漏洞

D-Link Router is an application WIFI router from China AUO D-Link. It provides the function of connecting to the network. A security vulnerability exists in D-Link Router that stems from the cgibin binary not filtering the HTTP SOAPAction header field, which could lead to remote code execution...

EUVD-2013-1498

Malware in sbrugna...

EUVD-2019-3093

Malware in sbrugna...

EUVD-2021-21474

Malware in sbrugna...

EUVD-2021-21475

Malware in sbrugna...

EUVD-2008-7098

Malware in sbrugna...

EUVD-2022-46626

Malicious code in bioql PyPI...

EUVD-2022-41281

Malicious code in bioql PyPI...

EUVD-2023-39722

Malicious code in bioql PyPI...

CVE-2025-10779

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub402280 of the file /HNAP1/. The manipulation of the argument HNAPAUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and...

CVE-2025-10779

CVE-2025-10779 concerns the D-Link DCS-935L router (firmware up to 1.13.01). The vulnerability occurs in the HNAP1/ file, in the function sub_402280, where manipulating the HNAP_AUTH/SOAPAction argument enables a stack-based buffer overflow. The issue is exploitable remotely and, per sources, the...