Lucene search
+L

944 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-48305

Malicious code in bioql PyPI...

3.7CVSS5AI score0.00642EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-54776

Malicious code in bioql PyPI...

6.9CVSS5.4AI score0.00284EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-31452

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.04125EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•25 views

EUVD-2023-56416

Malicious code in bioql PyPI...

6.9CVSS5.8AI score0.00358EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-30792

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.07993EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2022-41400

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.1067EPSS
SaveExploits4References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-51437

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00239EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/09/29 4:47 a.m.•33 views

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

8.8CVSS6.8AI score0.04125EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/29 12:00 a.m.•19 views

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23371)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameter targetaddr in the file /goform/diagtraceroute, which can be exploited by an attacker to cause remote command injectio...

8.8CVSS7AI score0.04125EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/09/28 5:15 a.m.•16 views

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

8.8CVSS5.6AI score0.04125EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/28 5:15 a.m.•19 views

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

8.8CVSS0.04125EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/28 4:32 a.m.•7 views

CVE-2025-11096 D-Link DIR-823X diag_traceroute command injection

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS6.4AI score0.04125EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/28 4:32 a.m.•41 views

CVE-2025-11096 D-Link DIR-823X diag_traceroute command injection

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

6.5CVSS0.04125EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/09/28 12:00 a.m.•18 views

D-Link DIR-823X command injection vulnerability

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameter targetaddr in the file /goform/diagtraceroute, which can be exploited by an attacker to cause remote command injectio...

8.8CVSS7.7AI score0.04125EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•21 views

PT-2025-39758

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in the processing of the /goform/diag traceroute file within D-Link DIR-823X version 250416. Manipulation of the target addr argument can lead to command injection, allowing for remote...

8.8CVSS6.5AI score0.04125EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
•added 2025/09/24 12:28 a.m.•27 views

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

8.8CVSS7.8AI score0.07993EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/22 6:15 p.m.•18 views

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

8.8CVSS0.07993EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•3 views

CVE-2025-43953: Improper Neutralization of Special Elements used in a Command

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

8.8CVSS6.6AI score0.07993EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•17 views

PT-2025-38748

Name of the Vulnerable Software and Affected Versions 2wcom IP-4c version 2.16 Description The web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen. The affected functionality is accessible through the web interface. Th...

8.8CVSS7.7AI score0.07993EPSS
SaveExploits0References4
CVE
CVE
•added 2025/09/22 12:00 a.m.•29 views

CVE-2025-43953

The 2wcom IP-4c audio codec device (version 2.16 ) is vulnerable to command injection (CWE-77) via its web interface. Specifically, the ping or traceroute fields on the TCP/IP screen allow authorized admin and manager users to execute arbitrary code with root privileges. The vulnerability is loca...

8.8CVSS6.6AI score0.07993EPSS
SaveExploits0References2
Rows per page
Query Builder