CVE-2025-14208 D-Link DIR-823X set_wan_settings sub_415028 command injection

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2025-14208 D-Link DIR-823X set_wan_settings sub_415028 command injection

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

EUVD-2025-201619

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2025-14208

CVE-2025-14208 affects D-Link DIR-823X devices up to 20250416. The vulnerability resides in the function sub_415028 of /goform/set_wan_settings, where manipulating the argument ppp_username leads to command injection. Exploitation can be performed remotely, and public proof-of-concept/exploit mat...

PT-2025-49423

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions up to 20250416 Description A security flaw exists in D-Link DIR-823X up to version 20250416. The issue resides in the sub 415028 function within the /goform/set wan settings file. Manipulation of the ppp username...

EUVD-2025-30455

Malicious code in bioql PyPI...

EUVD-2025-31453

Malicious code in bioql PyPI...

EUVD-2025-31457

Malicious code in bioql PyPI...

EUVD-2025-29124

Malicious code in bioql PyPI...

EUVD-2025-31452

Malicious code in bioql PyPI...

EUVD-2025-29841

Malicious code in bioql PyPI...

EUVD-2025-31449

Malicious code in bioql PyPI...

EUVD-2025-14821

Malicious code in bioql PyPI...

EUVD-2025-31450

Malicious code in bioql PyPI...

EUVD-2025-1715

Malicious code in bioql PyPI...

EUVD-2025-31454

Malicious code in bioql PyPI...

EUVD-2025-2005

Malicious code in bioql PyPI...

CVE-2025-11100

A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uciset of the file /goform/setwifiblacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2025-11099

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function ucidel of the file /goform/deleteprohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed...

CVE-2025-11097

A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/setdevicename. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...