CVE-2026-113595

Sharkord versions prior to 0.0.26 are vulnerable to a missing authorization flaw in the others.changeLogo tRPC mutation. This vulnerability allows any authenticated member to modify the server logo without possessing the required MANAGE_SETTINGS permission. An attacker can exploit this to remove ...

EUVD-2026-105161

Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without the MANAGESETTINGS permission. Attackers can remove the current logo and replace it with an uploaded image that is...

D-Link DAR-8000 Router Arbitrary Command Execution

The vulnerability in the /sysmanage/changelogo.php script of the D-Link DAR-8000 router’s microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

CVE-2023-5154

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

D-Link DAR-8000 Code Issue Vulnerability

D-Link DAR-8000 is an Internet behavior auditing gateway from China Youxun D-Link. A code issue vulnerability exists in D-Link DAR-8000 20151231 and earlier versions, which stems from an arbitrary file upload vulnerability in the parameter fileupload in the file /sysmanage/changelogo.php...