CVE-2019-25372 OPNsense 19.1 Reflected XSS via diag_traceroute.php

OPNsense 19.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by exploiting insufficient input validation in the host parameter. Attackers can submit crafted payloads through POST requests to diagtraceroute.php to execute...

The vulnerability of the /goform/diag_traceroute file in D-Link DIR-823X router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /goform/diagtraceroute function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning at the control level when processing the targetaddr parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...