Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 16:55:25 +0000 bdu:2025-00104 https://cve.radiocsirt.org/vuln/bdu:2025-00104 bdu:2025-00104 https://cve.radiocsirt.org/vuln/bdu:2025-00104 cnvd-2019-39555 https://cve.radiocsirt.org/vuln/cnvd-2019-39555 cnvd-2019-39555 https://cve.radiocsirt.org/vuln/cnvd-2019-39555 EUVD-2026-209823 https://cve.radiocsirt.org/vuln/euvd-2026-209823 EUVD-2026-209823 https://cve.radiocsirt.org/vuln/euvd-2026-209823 fkie_cve-2019-10891 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10891 <p>An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header.</p> <p>An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnap_main, which calls system() without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10891 GHSA-frjj-4mjw-3gmf https://cve.radiocsirt.org/vuln/ghsa-frjj-4mjw-3gmf <p>D-Link DIR-806 devices allow remote attackers to execute arbitrary shell commands via a trailing substring of an HTTP header that has &#34;SOAPAction: http://purenetworks.com/HNAP1/GetDeviceSettings/&#34; at the beginning.</p> <p>D-Link DIR-806 devices allow remote attackers to execute arbitrary shell commands via a trailing substring of an HTTP header that has &#34;SOAPAction: http://purenetworks.com/HNAP1/GetDeviceSettings/&#34; at the beginning.</p> https://cve.radiocsirt.org/vuln/ghsa-frjj-4mjw-3gmf gsd-2019-10891 https://cve.radiocsirt.org/vuln/gsd-2019-10891 gsd-2019-10891 https://cve.radiocsirt.org/vuln/gsd-2019-10891