CVE-2025-29039

The CVE-2025-29039 issue affects D-Link DIR-832x devices (firmware version 240802). The root cause is a 0x41dda8 function that fails to properly filter constructed command characters, enabling a remote attacker to execute arbitrary code. Documented impact is remote code execution with high impact...

CVE-2025-29043

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the function 0x417234...

PT-2025-17205 · D Link · Dir 832

Name of the Vulnerable Software and Affected Versions: dlink DIR 832 version 240802 Description: The issue allows a remote attacker to execute arbitrary code via the function 0x41dda8. Recommendations: For dlink DIR 832 version 240802, consider disabling the function 0x41dda8 as a temporary...

D-Link DIR-823X 安全漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-832x suffers from a command injection vulnerability that stems from the failure of function 0x417234 to correctly filter construct command special characters, commands, and so on. An attacker can exploit this...

PT-2025-17078 · D Link · Dir 832

Name of the Vulnerable Software and Affected Versions: dlink DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c. This enables the attacker to potentially gain control over the device. Recommendations...

CVE-2025-29041

An issue in dlink DIR 823x 240802 allows a remote attacker to execute arbitrary code via the targetaddr key value and the function 0x41710c...

CVE-2025-29042

An issue in dlink DIR 832x 240802 allows a remote attacker to execute arbitrary code via the macaddr key value to the function 0x42232c...

CVE-2025-29042

The CVE-2025-29042 entry concerns D-Link DIR-832x (version 240802) with a command-injection vulnerability in the 0x42232c function triggered via the macaddr parameter, allowing remote arbitrary code execution. Affected component: the 0x42232c handling path in the device firmware; root cause descr...

CVE-2025-3724

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component DIR Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-3724 PCMan FTP Server DIR Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component DIR Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-3724

PCMan FTP Server 2.0.7 is affected by a vulnerability in the DIR Command Handler that can be exploited remotely to cause a buffer overflow. Multiple sources describe the issue as critical and indicate remote access is possible and that an exploit has been disclosed. The available documents do not...

CVE-2025-22083 vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint

In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhostscsisetendpoint If vhostscsisetendpoint is called multiple times without a vhostscsiclearendpoint between them, we can hit multiple bugs found by Haoran Zhang: 1. Use-after-free...

PCMan FTP Server 安全漏洞

PCMan FTP Server is a server software for File Transfer Protocol FTP. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the failure of the DIR Command Handler module DIR Command Handler to properly handle a specific request. No detailed vulnerability details are provid...

Agent Zero 路径遍历漏洞

Agent Zero is an artificial intelligence framework by the individual developer Jan Tomášek. A path traversal vulnerability exists in Agent Zero version 0.8.1.2, which stems from improper manipulation of the parameter path in the file /getworkdirfiles, which could lead to a path traversal attack...

The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2025-16884 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the DIR Command Handler component, which can be exploited remotely. The manipulation leads to a buffer overflow. Recommendations: For PCMan FTP Server version 2.0....

Denial of Service Vulnerability in D-Link DIR-823x

The D-Link DIR-823X is a wireless router from China's AUO D-Link. A denial of service vulnerability exists in the D-Link DIR-823x, which can be exploited by attackers to cause a denial of service...

Chitu 代码问题漏洞

Chitu is thu-pacman open source a high performance reasoning framework for large language models. A code issue vulnerability exists in Chitu version 0.1.0, which stems from the fact that incorrect manipulation of the parameter ckptpath/quantckptdir can lead to deserialization issues...

Malicious code in dir-auto-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1b45e8461ec6f667e77bc6f6a4bbe6094a528754bb580ab2874833d1f83f95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2753 Malicious code in dir-auto-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c1b45e8461ec6f667e77bc6f6a4bbe6094a528754bb580ab2874833d1f83f95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...