605 matches found
EUVD-2017-11948
Malware in sbrugna...
EUVD-2019-8011
Malware in sbrugna...
EUVD-2019-18504
Malware in sbrugna...
EUVD-2017-12014
Malware in sbrugna...
EUVD-2017-11972
Malware in sbrugna...
EUVD-2017-11971
Malware in sbrugna...
EUVD-2017-11985
Malware in sbrugna...
CVE-2025-11339: Buffer Copy without Checking Size of Input
A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub4BD4F8 of the file /webchat/hiblock.asp of the component jhttpd. The manipulation of the argument popupId leads to buffer overflow. The attack can be initiated remotely. The exploit has been...
CVE-2025-11338: Buffer Copy without Checking Size of Input
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploi...
CVE-2025-11335: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...
EUVD-2025-30920
Malicious code in bioql PyPI...
EUVD-2022-1383
Malicious code in bioql PyPI...
EUVD-2022-6820
Malicious code in bioql PyPI...
CVE-2025-57636
OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...
CVE-2025-57636
OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...
CVE-2025-57636
OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...
CVE-2025-57636
OS Command injection vulnerability in D-Link C1 2020-02-21. The sub47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time"...
CVE-2025-57636
The D-Link C1 (versions prior to 2020-02-21 ) and the D-Link DI-7100G router are vulnerable to an OS Command injection vulnerability. The issue resides in the jhttpd component's sub_47F028 function, which fails to properly neutralize special elements in the "time" HTTP parameter. A remote attacke...
PT-2025-39210
Name of the Vulnerable Software and Affected Versions D-Link C1 versions prior to 2020-02-21 Description A command injection issue exists in the jhttpd component of the D-Link C1. The sub 47F028 function is susceptible to command injection through the time HTTP parameter. This allows for potentia...
