CVE-2025-14884 D-Link DIR-605 Firmware Update Service command injection

A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Performing manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. This...

CVE-2025-14884

The CVE-2025-14884 entry concerns a remote command-injection vulnerability in the Firmware Update Service of D-Link DIR-605 (version 202WWB03). The issue stems from a flaw in the firmware update component, allowing an attacker to inject commands over the network. The exploit is public, and affect...

PT-2025-52269

Name of the Vulnerable Software and Affected Versions D-Link DIR-605 version 202WWB03 Description A flaw exists in the Firmware Update Service component of the device, allowing for command injection. This issue can be exploited remotely. The exploit is publicly available. This vulnerability affec...

CVE-2025-14884: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Performing manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. This...

SUSE CVE-2025-68226

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfidsinvalidationworker The previous commit bdb596ceb4b7 "smb: client: fix potential UAF in smb2closecachedfid" was an incomplete backport and missed one krefput call in...

EUVD-2025-203670

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfidsinvalidationworker The previous commit bdb596ceb4b7 "smb: client: fix potential UAF in smb2closecachedfid" was an incomplete backport and missed one krefput call in...

CVE-2025-68226

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfidsinvalidationworker The previous commit bdb596ceb4b7 "smb: client: fix potential UAF in smb2closecachedfid" was an incomplete backport and missed one krefput call in...

CVE-2025-68226 smb: client: fix incomplete backport in cfids_invalidation_worker()

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfidsinvalidationworker The previous commit bdb596ceb4b7 "smb: client: fix potential UAF in smb2closecachedfid" was an incomplete backport and missed one krefput call in...

CVE-2025-68226

The connected sources confirm a concrete Linux kernel issue in the SMB client: an incomplete backport in cfids_invalidation_worker() caused by a missed kref_put() path, which should have been converted to close_cached_dir(). This is tied to the previously published fix for smb2_close_cached_fid()...

Security update for librsvg

This update for librsvg fixes the following issues: Update to version 2.52.12. CVE-2024-12224: idna: incorrect hostname comparisons and URL parsing may be performed due to acceptance of Punycode labels that do not produce any non-ASCII output when decoded bsc1243867. CVE-2024-43806: rustix:...

CVE-2025-14659

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be...

EUVD-2025-203296

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be...

CVE-2025-14659

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be...

CVE-2025-14659 D-Link DIR-860LB1/DIR-868LB1 DHCP command injection

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be...

CVE-2025-14659

CVE-2025-14659 affects D-Link DIR-860LB1 and DIR-868LB1 (firmware 203b01/203b03). Affected is the DHCP Daemon’s hostname argument; manipulation leads to remote command injection. Exploitation is publicly available. The provided documents do not specify a patch version or mitigation; no fix inform...

CVE-2025-14659 D-Link DIR-860LB1/DIR-868LB1 DHCP command injection

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be...

CVE-2025-14659: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in D-Link DIR-860LB1 and DIR-868LB1 203b01/203b03. Affected is an unknown function of the component DHCP Daemon. The manipulation of the argument Hostname results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be...

D-Link DIR-860LB1和D-Link DIR-868LB1 命令注入漏洞

The D-Link DIR-860LB1 and D-Link DIR-868LB1 are both wireless routers from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DIR-860LB1 and D-Link DIR-868LB1 version 203b01/203b03, which stems from incorrect manipulation of the parameter Hostname in the DHCP Daemon...

PT-2025-51161

Name of the Vulnerable Software and Affected Versions D-Link DIR-860LB1 version 203b01 D-Link DIR-868LB1 version 203b01 D-Link DIR-860LB1 version 203b03 D-Link DIR-868LB1 version 203b03 Description A flaw exists in the DHCP Daemon component of the routers. Manipulation of the Hostname argument ca...

CVE-2025-14528

A vulnerability was detected in D-Link DIR-803 up to 1.04. Impacted is an unknown function of the file /getcfg.php of the component Configuration Handler. The manipulation of the argument AUTHORIZEDGROUP results in information disclosure. The attack may be performed from remote. The exploit is no...