VulnCheck KEV: CVE-2025-10123

A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub415028 of the file /goform/setstaticleases. Executing manipulation of the argument Hostname can lead to command injection. The attack can be launched remotely. The exploit has been...

CVE-2025-14208: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

goform/set_static_leases Buffer Overflow DoS

The vulnerability of the sub415028 function in the goform/setstaticleases module of the D-Link DIR-823X router software is related to the lack of data cleaning measures at the management level when processing the Hostname parameter. Exploiting this vulnerability allows an attacker to execute...

CVE-2025-10123: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub415028 of the file /goform/setstaticleases. Executing manipulation of the argument Hostname can lead to command injection. The attack can be launched remotely. The exploit has been...