https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 16:12:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-00970 bdu:2019-00970 https://cve.radiocsirt.org/vuln/bdu:2019-00970 https://cve.radiocsirt.org/vuln/cnvd-2026-06831 cnvd-2026-06831 https://cve.radiocsirt.org/vuln/cnvd-2026-06831 https://cve.radiocsirt.org/vuln/euvd-2026-51353 EUVD-2026-51353 https://cve.radiocsirt.org/vuln/euvd-2026-51353 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7298 <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of &#39; /bin/telnetd&#39; for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input.</p> <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of &#39; /bin/telnetd&#39; for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7298 https://cve.radiocsirt.org/vuln/ghsa-w4qp-7pjr-4mq7 <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of &#39; /bin/telnetd&#39; for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input.</p> <p>An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call to the system function with untrusted input from the request body, such as a body of &#39; /bin/telnetd&#39; for the GetDeviceSettingsset API function. Consequently, an attacker can execute any command remotely when they control this input.</p> https://cve.radiocsirt.org/vuln/ghsa-w4qp-7pjr-4mq7 https://cve.radiocsirt.org/vuln/gsd-2019-7298 gsd-2019-7298 https://cve.radiocsirt.org/vuln/gsd-2019-7298