CVE-2025-6897

creationtimestamp| type| source ---|---|--- 2025-06-30 07:56:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19906 2025-06-30 10:58:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lssznsrizb25 2025-06-30 20:26:57+00:00| seen|...

CVE-2025-6897

CVE-2025-6897 affects D-Link DI-7300G+ (firmware 19.12.25A1). The vulnerability is in httpd_debug.asp; manipulating the Time parameter enables os command injection. Public exploitation evidence exists (POC/poisoned claims in multiple sources) with impacts on confidentiality, integrity and availab...

CVE-2025-6897 D-Link DI-7300G+ httpd_debug.asp os command injection

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpddebug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used...