https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:26:19.229009+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09523 bdu:2025-09523 2026-10-04T21:26:19.232159+00:00 bdu:2025-09523 https://cve.radiocsirt.org/vuln/euvd-2026-321222 EUVD-2026-321222 2026-10-04T21:26:19.232193+00:00 EUVD-2026-321222 https://cve.radiocsirt.org/vuln/fkie_cve-2013-10050 fkie_cve-2013-10050 2026-10-04T21:26:19.232207+00:00

An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13) via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid credentials to inject arbitrary shell commands. Exploitation enables full device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is present in firmware versions that expose tools_vct.xgi and use the Mathopd/1.5p6 web server. No vendor patch is available, and affected models are end-of-life.

 https://cve.radiocsirt.org/vuln/ghsa-2cvr-c5hj-x7rm GHSA-2cvr-c5hj-x7rm 2026-10-04T21:26:19.232238+00:00

An OS command injection vulnerability exists in multiple D-Link routers—confirmed on DIR-300 rev A (v1.05) and DIR-615 rev D (v4.13)—via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid credentials to inject arbitrary shell commands. Exploitation enables full device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is present in firmware versions that expose tools_vct.xgi and use the Mathopd/1.5p6 web server. No vendor patch is available, and affected models are end-of-life.