https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:08:11.497725+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-25120 CVE-2018-25120 — D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test 2026-10-09T17:08:11.499406+00:00

Affected: D-Link DNS-343 ShareCenter

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail_Test' and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.