Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:22:11 +0000 bdu:2025-09595 https://cve.radiocsirt.org/vuln/bdu:2025-09595 bdu:2025-09595 https://cve.radiocsirt.org/vuln/bdu:2025-09595 cnvd-2025-18551 https://cve.radiocsirt.org/vuln/cnvd-2025-18551 cnvd-2025-18551 https://cve.radiocsirt.org/vuln/cnvd-2025-18551 EUVD-2026-318846 https://cve.radiocsirt.org/vuln/euvd-2026-318846 EUVD-2026-318846 https://cve.radiocsirt.org/vuln/euvd-2026-318846 fkie_cve-2013-10069 https://cve.radiocsirt.org/vuln/fkie_cve-2013-10069 <p>The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.</p> <p>The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-10069 GHSA-hfjr-pxjv-x4fv https://cve.radiocsirt.org/vuln/ghsa-hfjr-pxjv-x4fv <p>The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.</p> <p>The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.</p> https://cve.radiocsirt.org/vuln/ghsa-hfjr-pxjv-x4fv