CVE-2025-20258

A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject arbitrary commands into emails that are sent by the service. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting...

PT-2025-22397 · Cisco · Cisco Duo

Name of the Vulnerable Software and Affected Versions: Cisco Duo affected versions not specified Description: A vulnerability in the self-service portal could allow an unauthenticated, remote attacker to inject arbitrary commands into emails sent by the service. This issue is due to insufficient...

CVE-2023-44424

CVE-2023-44424 affects D-Link DIR-X3260 routers. A flaw in prog.cgi handling HNAP requests on the lighttpd web server (ports 80/443) allows command injection via an unsafely used user-supplied string, enabling code execution as root. Attack path requires network adjacency and bypasses authenticat...