PT-2025-7107

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version 1.01 Description: A command injection vulnerability was discovered in the D-Link DSL-3782, allowing attackers to execute arbitrary operating system commands via a crafted packet. The vulnerability is exploited through...

CVE-2025-25893: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...