The vulnerability of the /goform/diag_traceroute file in D-Link DIR-823X router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/diagtraceroute function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning at the control level when processing the targetaddr parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...

EUVD-2022-41400

Malicious code in bioql PyPI...

EUVD-2025-7232

Malicious code in bioql PyPI...

EUVD-2022-43330

Malicious code in bioql PyPI...

EUVD-2023-51437

Malicious code in bioql PyPI...

EUVD-2025-30792

Malicious code in bioql PyPI...

EUVD-2022-3192

Malicious code in bioql PyPI...

EUVD-2022-48305

Malicious code in bioql PyPI...

EUVD-2024-54776

Malicious code in bioql PyPI...

EUVD-2023-56416

Malicious code in bioql PyPI...

EUVD-2025-31452

Malicious code in bioql PyPI...

EUVD-2024-18019

Malicious code in bioql PyPI...

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23371)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameter targetaddr in the file /goform/diagtraceroute, which can be exploited by an attacker to cause remote command injectio...

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-11096 D-Link DIR-823X diag_traceroute command injection

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-11096 D-Link DIR-823X diag_traceroute command injection

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

D-Link DIR-823X 命令注入漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameter targetaddr in the file /goform/diagtraceroute, which can be exploited by an attacker to cause remote command injectio...

PT-2025-39758

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in the processing of the /goform/diag traceroute file within D-Link DIR-823X version 250416. Manipulation of the target addr argument can lead to command injection, allowing for remote...