D-Link DIR-823X set_prohibiting - Command Injection

D-Link DIR-823X 240126 and 240802 contain a command injection caused by sending a POST request to /goform/setprohibiting, letting an authorized attacker execute arbitrary commands remotely, exploit requires attacker to be authorized. id: CVE-2025-29635 info: name: D-Link DIR-823X setprohibiting -...

CVE-2025-29635

creationtimestamp| type| source ---|---|--- 2025-03-25 13:23:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8651 2025-03-25 16:49:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll7q2zfffq2j 2025-03-25 17:30:48+00:00| published-proof-of-concept|...

CVE-2025-29635

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...

CVE-2025-29635

A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...