https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 07:40:47 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-10640 cnvd-2026-10640 https://cve.radiocsirt.org/vuln/cnvd-2026-10640 https://cve.radiocsirt.org/vuln/euvd-2026-318228 EUVD-2026-318228 https://cve.radiocsirt.org/vuln/euvd-2026-318228 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25120 <p>D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint &#39;/goform/Mail_Test&#39; and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.</p> <p>D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint &#39;/goform/Mail_Test&#39; and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-25120 https://cve.radiocsirt.org/vuln/ghsa-3r6w-f62x-hc2h <p>D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint &#39;/goform/Mail_Test&#39; and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.</p> <p>D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint &#39;/goform/Mail_Test&#39; and uses several form parameters directly in a call to a system email utility without proper input validation. An unauthenticated remote attacker can supply crafted form data that injects shell commands, resulting in execution as root on the device. NOTE: The DNS-343 product line has been declared end-of-life.</p> https://cve.radiocsirt.org/vuln/ghsa-3r6w-f62x-hc2h