65 matches found
CVE-2026-93958
D-Link R95 BE9500 Wi-Fi 7 Smart Router Vendor：D-Link Product：R95 Product Model：BE9500 Firmware Version：1.01B06 Vulnerability Type：Authenticated Command Injection Description The D-Link R95 BE9500 Wi-Fi 7 Smart Router firmware version BE95001.00.16 contains a command injection vulnerability in the...
The vulnerability of the /bin/ssi file in the DHMAPI component of D-Link R95 router software allows a hacker to execute arbitrary code and completely compromise the device.
The vulnerability of the /bin/ssi file of the DHMAPI component in D-Link R95 router microprogramming software is related to the lack of measures taken to neutralize special elements in the NTPServer parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code,...
Exploit for CVE-2026-93958
CVE-2026-93958 — D-Link R95 BE9500 DHMAPI / NTPServer Pytho...
CVE-2026-93958
A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...
CVE-2026-93958 D-Link R95 DHMAPI ssi system os command injection
A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...
CVE-2026-93958
CVE-2026-93958 is an OS command injection vulnerability in the D-Link R95 router (firmware BE9500_1.00.16). The flaw resides in the DHMAPI component, specifically the system function within the file /bin/ssi. By manipulating the NTPServer argument, an attacker can inject arbitrary operating-syste...
EUVD-2026-83637
A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...
CVE-2026-93958 D-Link R95 DHMAPI ssi system os command injection
A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...
CVE-2026-93958: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in D-Link R95 BE95001.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotely. The exploit has been made public and...
The vulnerability of the fromSetSysTime() function in Tenda AC6 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetSysTime function in Tenda AC6 router software lies in the copying of buffers without checking the size of the input data when processing the ntpServer parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2018-10448
Malware in sbrugna...
EUVD-2018-18578
Malware in sbrugna...
EUVD-2022-30110
Malicious code in bioql PyPI...
Tenda AC6 fromSetSysTime function ntpServer parameter buffer overflow vulnerability
Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability that originates from the ntpServer parameter in the...
CVE-2025-55603
Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...
Tenda Ax3 安全漏洞
Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a buffer overflow vulnerability, which stems from the ntpServer parameter in the...
CVE-2025-55603: Buffer Copy without Checking Size of Input
Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromSetSysTime function via the ntpServer parameter...
CVE-2025-55499
Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function...
CVE-2025-55499: Buffer Copy without Checking Size of Input
Tenda AC6 V15.03.06.23multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function...