Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-25195 State: PUBLISHED Published: 2023-03-28T11:16:28.304Z Last Updated: 2024-10-23T15:16:08.717Z Vendors: Apache Software Foundation Products: Apache Fineract Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract. Authorized users with limited permissions can gain access to server and may be able to use server for any outbound traffic. This issue affects Apache Fineract: from 1.4 through 1.8.3. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/m58fdjmtkfp9h4c0r4l48rv995w3qhb6
CVE ID: CVE-2023-25196 State: PUBLISHED Published: 2023-03-28T11:16:57.603Z Last Updated: 2024-10-23T15:14:44.993Z Vendors: Apache Software Foundation Products: Apache Fineract Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache Fineract. Authorized users may be able to change or add data in certain components. This issue affects Apache Fineract: from 1.4 through 1.8.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/m9x3vpn3bry4fympkzxnnz4qx0oc0w8m
CVE ID: CVE-2023-25197 State: PUBLISHED Published: 2023-03-28T11:17:19.026Z Last Updated: 2024-10-23T15:14:18.730Z Vendors: Apache Software Foundation Products: apache fineract Problem Types: CWE-89 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation apache fineract. Authorized users may be able to exploit this for limited impact on components. This issue affects apache fineract: from 1.4 through 1.8.2. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/v0q9x86sx6f6l2nzr1z0nwm3y9qlng04
CVE ID: CVE-2023-25199 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-11-01T18:36:42.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to execute JavaScript code and obtain sensitive information in a victim's browser. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://summitinfosec.com/blog/x-ray-vision-identifying-cve-2023-25199-and-cve-2023-25200-in-manufacturing-equipment/
CVE ID: CVE-2023-25200 State: PUBLISHED Published: 2024-04-04T00:00:00 Last Updated: 2024-10-31T14:53:44.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render malicious HTML and obtain sensitive information in a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://summitinfosec.com/blog/x-ray-vision-identifying-cve-2023-25199-and-cve-2023-25200-in-manufacturing-equipment/
CVE ID: CVE-2023-25201 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T21:14:57.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows a remote attacker to execute arbitrary code via a crafted script upload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://herolab.usd.de/security-advisories/ - https://www.multitech.com
CVE ID: CVE-2023-25206 State: PUBLISHED Published: 2023-03-14T00:00:00.000Z Last Updated: 2025-02-27T15:16:23.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/en/customer-reviews/22373-advanced-reviews-photos-reminder-google-snippets.html - https://friends-of-presta.github.io/security-advisories/modules/2023/03/14/ws_productreviews.html
CVE ID: CVE-2023-25207 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-03-03T19:37:07.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://addons.prestashop.com/fr/transporteurs/19414-dpd-france.html - https://friends-of-presta.github.io/security-advisories/modules/2023/03/09/dpdfrance.html
CVE ID: CVE-2023-25210 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-13T14:43:12.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/1/1.md
CVE ID: CVE-2023-25211 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-13T14:42:12.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/2/2.md
CVE ID: CVE-2023-25212 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-13T14:40:23.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/6/6.md
CVE ID: CVE-2023-25213 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T21:11:55.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/5/5.md
CVE ID: CVE-2023-25214 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T21:06:37.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/4/4.md
CVE ID: CVE-2023-25215 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T21:01:26.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/3/3.md
CVE ID: CVE-2023-25216 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T21:00:24.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/9/9.md
CVE ID: CVE-2023-25217 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T20:58:25.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/10/10.md
CVE ID: CVE-2023-25218 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T20:51:51.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/8/8.md
CVE ID: CVE-2023-25219 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T20:43:22.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/11/11.md
CVE ID: CVE-2023-25220 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T20:36:24.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/DrizzlingSun/Tenda/blob/main/AC5/7/7.md
CVE ID: CVE-2023-25221 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:35:21.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Libde265 v1.0.10 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function in motion.cc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/strukturag/libde265/issues/388 - https://lists.debian.org/debian-lts-announce/2023/03/msg00004.html
CVE ID: CVE-2023-25222 State: PUBLISHED Published: 2023-03-01T00:00:00.000Z Last Updated: 2025-03-07T17:34:14.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LibreDWG/libredwg/issues/615
CVE ID: CVE-2023-25223 State: PUBLISHED Published: 2023-03-07T00:00:00.000Z Last Updated: 2025-03-05T15:38:06.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/crmeb/crmeb_java/issues/9
CVE ID: CVE-2023-25230 State: PUBLISHED Published: 2023-03-07T00:00:00 Last Updated: 2024-08-02T11:18:36.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary requests via manipulation of the hook_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blackholll/loonflow/issues/402
CVE ID: CVE-2023-25231 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:39:57.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/104
CVE ID: CVE-2023-25233 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T13:53:20.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113
CVE ID: CVE-2023-25234 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:41:03.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_1
CVE ID: CVE-2023-25235 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-10T17:42:05.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_2
CVE ID: CVE-2023-25240 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T15:28:35.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pimcore/pimCore-10.5.15
CVE ID: CVE-2023-25241 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T14:55:32.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: bgERP v22.31 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Search parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/bgERP/2023/bgERP-v22.31-Cookie-Session-vulnerability%2BXSS-Reflected - https://portswigger.net/kb/issues/00500b01_cookie-manipulation-reflected-dom-based
CVE ID: CVE-2023-25260 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T18:36:37.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://stimulsoft.com - https://cloud-trustit.spp.at/s/K9ZXWzEmftaxa3C - https://cves.at/posts/cve-2023-25260/writeup/
CVE ID: CVE-2023-25261 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T15:49:33.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 2023.1.4 and Stimulsoft Designer (Web) 2023.1.3 and Stimulsoft Viewer (Web) 2023.1.3. Access to the local file system is not prohibited in any way. Therefore, an attacker may include source code which reads or writes local directories and files. It is also possible for the attacker to prepare a report which has a variable that holds the gathered data and render it in the report. Additional Analyst Notes: -
are a report which has a variable that holds the gathered data and render it in the report. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://stimulsoft.com - https://cloud-trustit.spp.at/s/Rskwb3jKXQQsJy2 - https://cves.at/posts/cve-2023-25261/writeup/
CVE ID: CVE-2023-25262 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-19T18:35:02.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather than the client. Therefore, the server causes outbound traffic and potentially imports data. An attacker may also leverage this behaviour to exfiltrate data of machines on the internal network of the server hosting the Sti
er may also leverage this behaviour to exfiltrate data of machines on the internal network of the server hosting the Stimulsoft Reporting Designer (Web). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://stimulsoft.com - https://cloud-trustit.spp.at/s/HjEksN86SfsMaJM - https://cves.at/posts/cve-2023-25262/writeup/
CVE ID: CVE-2023-25263 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T15:47:59.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the attacker is able to decrypt any connectionstring stored in .mrt files since a static secret is used. The secret does not differ between the tested versions and different operating systems. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://stimulsoft.com - https://cloud-trustit.spp.at/s/Db8ZfNq2WYiNCHa - https://cves.at/posts/cve-2023-25263/writeup/
CVE ID: CVE-2023-25264 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:17:16.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes - https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html
CVE ID: CVE-2023-25265 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:18:17.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes - https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html
CVE ID: CVE-2023-25266 State: PUBLISHED Published: 2023-02-28T00:00:00.000Z Last Updated: 2025-03-18T15:48:36.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can change the Office directory setting pointing to an arbitrary remote network path. This triggers the execution of the soffice binary under the attackers control leading to arbitrary remote code execution (RCE). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes - https://frycos.github.io/vulns4free/2023/01/
resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes - https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html
CVE ID: CVE-2023-25267 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:34:14.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.kerioconnect.gfi.com/hc/en-us/articles/9044634878226-Kerio-Connect-10-0-0-Release-Notes - https://gist.github.com/Frycos/62fa664bacd19a85235be19c6e4d7599
CVE ID: CVE-2023-25279 State: PUBLISHED Published: 2023-03-13T00:00:00.000Z Last Updated: 2025-03-03T19:23:32.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20In%20tools_AccountName
CVE ID: CVE-2023-25280 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-10-21T23:15:22.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/migraine-sudo/D_Link_Vuln/tree/main/cmd%20Inject%20in%20pingV4Msg
CVE ID: CVE-2023-25281 State: PUBLISHED Published: 2023-03-16T00:00:00.000Z Last Updated: 2025-02-26T16:35:46.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/migraine-sudo/D_Link_Vuln/tree/main/stackoverflow%20cancelPing
CVE ID: CVE-2023-25282 State: PUBLISHED Published: 2023-03-15T00:00:00.000Z Last Updated: 2025-02-27T14:31:45.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/migraine-sudo/D_Link_Vuln/tree/main/Permanent%20DDOS%20vulnerability%20in%20emailInfo