EUVD-2021-32377

Malicious code in bioql PyPI...

Netgear DC112A deviceName Command Injection Vulnerability

The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

NETGEAR DC112A 安全漏洞

The Netgear DC112A is a wireless router. The Netgear DC112A suffers from a command injection vulnerability that originates in the usbadv.cgi handling of the deviceName parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

CVE-2025-28219: Improper Neutralization of Special Elements used in an OS Command

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

CVE-2025-28219

Netgear DC112A V1.0.0.64 has an OS command injection vulnerability in the usbadv.cgi, which allows remote attackers to execute arbitrary commands via parameter "deviceName" passed to the binary through a POST request...

CVE-2025-28219

The Netgear DC112A wireless router, specifically version 1.0.0.64 , contains an OS command injection vulnerability in the usb_adv.cgi endpoint. The flaw is caused by improper neutralization of special elements in the deviceName parameter when processed via a POST request , allowing remote attacke...

CVE-2023-38925

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

CVE-2023-38925

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

CVE-2023-38925

CVE-2023-38925 affects Netgear devices: DC112A (v1.0.0.64), EX6200 (v1.0.3.94), and R6300v2 (v1.0.4.8) due to a buffer overflow in the http_passwd parameter of password.cgi. The root cause is a buffer overflow vulnerability in the affected CGI endpoint. The connected sources provide no exploit de...

CVE-2023-38925: Buffer Copy without Checking Size of Input

Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the httppasswd parameter in password.cgi...

PT-2023-26689 · NetGear · Netgear R6300V2 +2

Name of the Vulnerable Software and Affected Versions: Netgear DC112A version 1.0.0.64 Netgear EX6200 version 1.0.3.94 Netgear R6300v2 version 1.0.4.8 Description: A buffer overflow issue was discovered via the http passwd parameter in password.cgi. This issue affects Netgear devices...

NETGEAR DC112A and EX6200 and R6300v2 Security Vulnerabilities

NETGEAR DC112A and others are products of NETGEAR Corporation.NETGEAR DC112A is a wireless router.NETGEAR EX6200 is a wireless network signal extender.NETGEAR R6300v2 is a wireless router. A security vulnerability exists in the NETGEAR DC112A version 1.0.0.64, EX6200 version 1.0.3.94, and R6300v2...

PT-2022-37664

Уязвимость микропрограммного обеспечения Wi-Fi роутеров RAXE500, RAXE450, XR1000, MK83, MK62, R6400v2, R7850, R6700v3, R7000P, R6900P, R8000, RS400, XR300, DC112A, R6400, WNDR3400v3, R7000, MR60, MR80, MS60, MS80 вызвана переполнением буфера на основе стека. Эксплуатация уязвимости может позволит...

CVE-2022-24655

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication...

CVE-2022-24655

A stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80 2.1.2.6, and DC112A 1.0.0.62, which may lead to the execution of arbitrary code without authentication...

CVE-2022-24655

CVE-2022-24655 is a reported stack overflow vulnerability in the upnpd service affecting Netgear EX6100v1 (firmware 201.0.2.28), CAX80 (2.1.2.6), and DC112A (1.0.0.62). The root cause is a stack overflow in upnpd, which may allow execution of arbitrary code without authentication. Affected produc...