CVE-2025-11335 D-Link DI-7100G C1 jhttpd msp_info.htm sub_46409C command injection

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...

D-Link DI-7100G 命令注入漏洞

The D-Link DI-7100G C1 is an enterprise-class router from D-Link, designed for small and medium-sized businesses. The D-Link DI-7100G C1 suffers from a command injection vulnerability that originates from the parameter iface in the file /mspinfo.htm?flag=qos that fails to correctly filter...

EUVD-2025-13451

Malicious code in bioql PyPI...

EUVD-2023-36141

Malicious code in bioql PyPI...

EUVD-2023-36142

Malicious code in bioql PyPI...

EUVD-2025-13611

Malicious code in bioql PyPI...

EUVD-2024-53549

Malicious code in bioql PyPI...

The vulnerability of D-Link DI-7300G+ and DI-8200G router microprogramming software lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DI-7300G+ and DI-8200G router microprogramming software lies in the lack of measures taken to neutralize special elements when processing parameters such as flag, cmd, and iface on the mspinfo.htm page. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2024-57228

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2025-45492

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the actionwireless function...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57233

NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...

CVE-2025-45492

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the actionwireless function...

CVE-2025-45492

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the actionwireless function...

CVE-2025-45492

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the actionwireless function...

Netgear EX8000 安全漏洞

The NETGEAR EX8000 is a tri-band WiFi wireless extender , which is mainly used to extend WiFi coverage, eliminate WiFi dead spots, and provide faster network speeds. The NETGEAR EX8000 suffers from a command injection vulnerability that originates from the Iface parameter in the actionwireless...

CVE-2025-45492

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the Iface parameter in the actionwireless function...

CVE-2025-45492

Netgear EX8000 device (V1.0.0.126) is vulnerable to a Command Injection flaw via the Iface parameter in the action_wireless function. This CVE-2025-45492 entry cites a NETWORK‑based vulnerability with low attack complexity, no privileges required, and user interaction not needed, leading to high ...

CVE-2024-57235

NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifenable function...

CVE-2024-57233

NETGEAR RAX5 AX1600 WiFi Router v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vifdisable function...