PT-2026-115195

Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom Update URL in services dyndns edit.php. Attackers can set a non-matching Result Match string so checkStatus logs file...

Malicious code in acme-dns-01-dyndns (npm)

The package acme-dns-01-dyndns was found to contain malicious code. --- Credit: OpenSSF source...

EUVD-2025-13618

Malicious code in bioql PyPI...

EUVD-2025-13617

Malicious code in bioql PyPI...

EUVD-2025-13615

Malicious code in bioql PyPI...

EUVD-2025-13616

Malicious code in bioql PyPI...

Malicious code in acme-dns-01-dyndns (npm)

The package acme-dns-01-dyndns was found to contain malicious code...

MAL-2025-14006 Malicious code in acme-dns-01-dyndns (npm)

The package acme-dns-01-dyndns was found to contain malicious code...

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

CVE-2025-45490

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...

CVE-2025-45488

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter...

CVE-2025-45490

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter...

CVE-2025-45491

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter...

CVE-2025-45488

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter...

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

CVE-2025-45491

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter...

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter...

PT-2025-19966 · Linksys · Linksys E5600

Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A command injection issue was found in the runtime.ddnsStatus DynDNS function, specifically via the password parameter. This allows for potential exploitation. Recommendations: For Linksys E5600...

PT-2025-19967 · Linksys · Linksys E5600

Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A command injection issue was discovered in the runtime.ddnsStatus DynDNS function, specifically via the username parameter. This allows for potential exploitation. Recommendations: For Linksys E560...

PT-2025-19964 · Linksys · Linksys E5600

Name of the Vulnerable Software and Affected Versions: Linksys E5600 version 1.1.0.26 Description: A command injection issue was found in the runtime.ddnsStatus DynDNS function, specifically via the mailex parameter. This allows for potential exploitation. Recommendations: For Linksys E5600 versi...