CVE-2025-60700

A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and librcm.so binaries. The sub4455BC function in prog.cgi stores user-supplied SetDMZSettings/IPAddress values in NVRAM via nvramsafeset"dmzipaddr", .... These values are later...

CVE-2025-8832

The CVE-2025-8832 entry affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 devices up to 20250801. The vulnerability is in the setDMZ function on the /goform/setDMZ endpoint where manipulation of the DMZIPAddress parameter causes a stack-based buffer overflow. The attack can be initiated r...