https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T22:53:14.844111+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2018-00123 bdu:2018-00123 2026-10-18T22:53:14.847665+00:00 bdu:2018-00123 https://cve.radiocsirt.org/vuln/cnvd-2017-35383 cnvd-2017-35383 2026-10-18T22:53:14.847694+00:00 cnvd-2017-35383 https://cve.radiocsirt.org/vuln/euvd-2026-79287 EUVD-2026-79287 2026-10-18T22:53:14.847708+00:00 EUVD-2026-79287 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16934 fkie_cve-2017-16934 2026-10-18T22:53:14.847719+00:00

The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a change_password.csp request, which supports a "<%%25call system.exec:" string in the passwd parameter.

 https://cve.radiocsirt.org/vuln/ghsa-qjgc-mf9m-9xq4 GHSA-qjgc-mf9m-9xq4 2026-10-18T22:53:14.847747+00:00

The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.html?content=/dev/mtdblock/5 request, and then using this password for the HTTP Basic Authentication needed for a change_password.csp request, which supports a "<%%25call system.exec:" string in the passwd parameter.

 https://cve.radiocsirt.org/vuln/gsd-2017-16934 gsd-2017-16934 2026-10-18T22:53:14.847764+00:00 gsd-2017-16934