https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:31:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14651 bdu:2025-14651 https://cve.radiocsirt.org/vuln/bdu:2025-14651 https://cve.radiocsirt.org/vuln/euvd-2026-273681 EUVD-2026-273681 https://cve.radiocsirt.org/vuln/euvd-2026-273681 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60344 <p>A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution (e.g., via sequences such as “../”). Successful exploitation may allow access to files outside of the intended directory, potentially exposing sensitive system or configuration files. The issue results from insufficient validation or sanitization of user-supplied input. Affected Products include: DSR-150, DSR-150N, and DSR-250N v1.09B32_WW.</p> <p>A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution (e.g., via sequences such as “../”). Successful exploitation may allow access to files outside of the intended directory, potentially exposing sensitive system or configuration files. The issue results from insufficient validation or sanitization of user-supplied input. Affected Products include: DSR-150, DSR-150N, and DSR-250N v1.09B32_WW.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-60344 https://cve.radiocsirt.org/vuln/ghsa-cpvj-qfc6-rjvx <p>An unauthenticated Local File Inclusion (LFI) vulnerability in D-Link DSR series routers allows remote attackers to retrieve sensitive configuration files in clear text. The exposed files contain administrative credentials, VPN settings, and other sensitive information, enabling full administrative access to the router. Affected Products include: DSR-150, DSR-150N, and DSR-250N v1.09B32_WW.</p> <p>An unauthenticated Local File Inclusion (LFI) vulnerability in D-Link DSR series routers allows remote attackers to retrieve sensitive configuration files in clear text. The exposed files contain administrative credentials, VPN settings, and other sensitive information, enabling full administrative access to the router. Affected Products include: DSR-150, DSR-150N, and DSR-250N v1.09B32_WW.</p> https://cve.radiocsirt.org/vuln/ghsa-cpvj-qfc6-rjvx