CVE-2025-11339

The CVE-2025-11339 entry concerns the D-Link DI-7100G C1 router. A buffer overflow in the jhttpd component’s function sub_4BD4F8 (in /webchat/hi_block.asp) can be triggered by manipulating the popupId argument, allowing remote exploitation. Public disclosure is indicated, with references across m...

The vulnerability of D-Link DCS-2530L and DCS-2670L IP cameras’ microprogramming software is related to errors in information processing, allowing intruders to disclose protected information.

The vulnerability of D-Link DCS-2530L and DCS-2670L IP cameras’ microprogramming software is related to errors in information processing. Exploiting this vulnerability can allow an attacker operating remotely to disclose protected information...

EUVD-2025-27219

Malicious code in bioql PyPI...

EUVD-2025-11768

Malicious code in bioql PyPI...

EUVD-2025-11478

Malicious code in bioql PyPI...

EUVD-2024-53635

Malicious code in bioql PyPI...

EUVD-2023-48320

Malicious code in bioql PyPI...

EUVD-2022-39486

Malicious code in bioql PyPI...

EUVD-2025-27744

Malicious code in bioql PyPI...

EUVD-2025-31454

Malicious code in bioql PyPI...

EUVD-2025-26310

Malicious code in bioql PyPI...

EUVD-2025-11479

Malicious code in bioql PyPI...

CVE-2025-11098

A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/setwifiblacklists. The manipulation of the argument macList results in command injection. The attack may be performed from remote. The exploit has been made public and could be use...

CVE-2025-11099

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function ucidel of the file /goform/deleteprohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed...

CVE-2025-11095

A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/deleteofflinedevice. Performing manipulation of the argument delvalue results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may ...

CVE-2025-11095 D-Link DIR-823X delete_offline_device command injection

A vulnerability was detected in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/deleteofflinedevice. Performing manipulation of the argument delvalue results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may ...

CVE-2025-10779

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub402280 of the file /HNAP1/. The manipulation of the argument HNAPAUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and...

CVE-2025-10779

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub402280 of the file /HNAP1/. The manipulation of the argument HNAPAUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and...

The vulnerability of the set_basic_api() function in D-Link DIR-825 router software allows a hacker to execute arbitrary code.

The vulnerability of the setbasicapi function in D-Link DIR-825 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted POST request...

CVE-2025-10628

A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Management Interface. Performing manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has...