67281 matches found
D-Link DIR-823X 操作系统命令注入漏洞
The D-Link DIR-823X is a wireless router produced by D-Link Corporation. The D-Link DIR-823X 250416 version has a vulnerability related to operating system command injection. This vulnerability stems from incorrect operations on the parameters terminaladdr/serverip/serverport in the Configuration...
Exploit for CVE-2025-49132
CVE-2025-49132 Proof of Concept PoC This repository contain...
CVE-2026-2084 D-Link DIR-823X set_language os command injection
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/setlanguage. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to...
CVE-2026-2084
A weakness has been identified in D-Link DIR-823X 250416. This impacts an unknown function of the file /goform/setlanguage. Executing a manipulation of the argument langSelection can lead to os command injection. It is possible to launch the attack remotely. The exploit has been made available to...
CVE-2026-2082
CVE-2026-2082 affects D-Link DIR-823X (build 250416). The flaw lies in the /goform/set_mac_clone path where manipulating the argument mac allows an os command injection due to an identified vulnerable function. This enables remote attackers to execute commands with high privileges; exploitation i...
CVE-2026-2082 D-Link DIR-823X set_mac_clone os command injection
A vulnerability was identified in D-Link DIR-823X 250416. The impacted element is an unknown function of the file /goform/setmacclone. Such manipulation of the argument mac leads to os command injection. The attack may be performed from remote. The exploit is publicly available and might be used...
PT-2026-6902
Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A weakness exists in D-Link DIR-823X version 250416. A manipulation of the langSelection argument in the file /goform/set language can lead to os command injection. The attack can be launched remotely...
CVE-2026-25632
EPyT-Flow is a Python package designed for the easy generation of hydraulic and water quality scenario data of water distribution networks. Prior to 0.16.1, EPyT-Flow’s REST API parses attacker-controlled JSON request bodies using a custom deserializer myloadfromjson that supports a type field...
CVE-2026-2063
A security flaw has been discovered in D-Link DIR-823X 250416. This vulnerability affects unknown code of the file /goform/setacserver of the component Web Management Interface. The manipulation of the argument acserver results in os command injection. The attack can be launched remotely. The...
CVE-2026-2063
CVE-2026-2063 affects D-Link DIR-823X 250416; the Web Management Interface’s /goform/set_ac_server is vulnerable to an OS command injection via the ac_server parameter. The flaw can be exploited remotely and there is public exploit activity. Remediation guidance across sources mentions applying u...
CVE-2025-69212
OpenSTAManager (2.9.8 and earlier) is affected by a critical OS Command Injection in decoding P7M (signed XML) files. The root cause is that decodeP7M($file) passes user-controlled filenames directly into PHP’s exec() without proper sanitization, enabling an authenticated attacker to craft a ZIP ...
GHSA-25FP-8W8P-MX36 OpenSTAManager has an OS Command Injection in P7M File Processing
Summary A critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server. Vulnerable Code File:...
Important Photon OS Security Update - PHSA-2026-5.0-0750
Updates of 'linux-esx', 'linux' packages of Photon OS have been released...
Low Photon OS Security Update - PHSA-2026-5.0-0757
Updates of 'libtiff' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-90-0756
Updates of 'expat' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-91-0750
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-90-0752
Updates of 'linux-esx' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-0752
Updates of 'linux-esx', 'linux' packages of Photon OS have been released...
Juniper Junos OS Vulnerability (JSA103173)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA103173 advisory. - A NULL Pointer Dereference vulnerability in the chassis daemon chassisd of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with low privileges ...