CVE-2025-11096

The CVE-2025-11096 entry concerns D-Link DIR-823X (version 250416) and a command-injection flaw in the /goform/diag_traceroute handler. The root cause is manipulation of the target_addr argument, enabling remote code execution. The vulnerability is reported as exploitable remotely and an exploit ...

CVE-2025-11096: Improper Neutralization of Special Elements used in a Command

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2024-11653: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in EnGenius ENH1350EXT, ENS500-AC and ENS620EXT up to 20241118. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/network/diagtraceroute. The manipulation of the argument diagtraceroute leads to command injection. The...

EnGenius多款产品 注入漏洞

The EnGenius ENH1350EXT and others are an outdoor wireless access point from EnGenius. An injection vulnerability exists in several EnGenius products, which stems from a command injection due to incorrect operation of the parameter diagtraceroute. The following products are affected: EnGenius...