CVE-2025-11096

The CVE-2025-11096 entry concerns D-Link DIR-823X (version 250416) and a command-injection flaw in the /goform/diag_traceroute handler. The root cause is manipulation of the target_addr argument, enabling remote code execution. The vulnerability is reported as exploitable remotely and an exploit ...

EnGenius多款产品 注入漏洞

The EnGenius ENH1350EXT and others are an outdoor wireless access point from EnGenius. An injection vulnerability exists in several EnGenius products, which stems from a command injection due to incorrect operation of the parameter diagtraceroute. The following products are affected: EnGenius...