https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 06:05:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00683 bdu:2019-00683 https://cve.radiocsirt.org/vuln/bdu:2019-00683 https://cve.radiocsirt.org/vuln/euvd-2026-51350 EUVD-2026-51350 https://cve.radiocsirt.org/vuln/euvd-2026-51350 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7297 <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.</p> <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7297 https://cve.radiocsirt.org/vuln/ghsa-8jwc-8ww6-25xw <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.</p> <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult function calls the system function with an untrusted input parameter named Address. Consequently, an attacker can execute any command remotely when they control this input.</p> https://cve.radiocsirt.org/vuln/ghsa-8jwc-8ww6-25xw https://cve.radiocsirt.org/vuln/gsd-2019-7297 gsd-2019-7297 https://cve.radiocsirt.org/vuln/gsd-2019-7297