https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 15:40:40 +0000 https://vulnerability.circl.lu/vuln/bdu:2024-04735 bdu:2024-04735 https://vulnerability.circl.lu/vuln/bdu:2024-04735 https://vulnerability.circl.lu/vuln/cnvd-2024-26088 cnvd-2024-26088 https://vulnerability.circl.lu/vuln/cnvd-2024-26088 https://vulnerability.circl.lu/vuln/fkie_cve-2024-5295 <p>D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21294.</p> <p>D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21294.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-5295 https://vulnerability.circl.lu/vuln/var-202405-0209 <p>D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21294. D-Link G416 is a wireless router from D-Link, a Chinese company.</p> <p>D-Link G416 has a code execution vulnerability, which is caused by the application failing to properly filter special elements in the constructed code segment</p> <p>D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability.</p> <p>The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21294. D-Link G416 is a wireless router from D-Link, a Chinese company.</p> <p>D-Link G416 has a code execution vulnerability, which is caused by the application failing to properly filter special elements in the constructed code segment</p> https://vulnerability.circl.lu/vuln/var-202405-0209