CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
D-Link DIR-823X Router Remote Command Injection Vulnerability (CVE-2025-29635) Security Advisory
[Affected Scope] D-Link DIR-823X router firmware versions 240126 and 240802.
[Impact] An authorized attacker can execute arbitrary system commands with root privileges and fully compromise the device by sending a crafted HTTP POST request to the /goform/set_prohibiting endpoint.
[Mitigation] Apply the official firmware patch immediately, disable remote WAN management, and enforce strong administrator credentials.
Critical OS Command Injection Vulnerability in End-of-Life (EOL) GeoVision Devices (CVE-2024-11120) Active Exploitation Alert
[Affected Scope] Certain End-of-Life (EOL) GeoVision IP cameras, video servers, and LPR systems
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, leading to complete device takeover and botnet recruitment
[Mitigation] Since these devices are EOL and no patches will be released, immediately isolate the affected devices from the internet or replace them with supported models
FXC AE1021 and AE1021PE Wireless LAN Access Points OS Command Injection Vulnerability (CVE-2023-49897) Analysis and Mitigation Guide
[Affected Scope] FXC AE1021PE firmware version 2.0.9 and earlier, and AE1021 firmware version 2.0.9 and earlier
[Impact] An authenticated attacker can execute arbitrary OS commands with root privileges, potentially leading to full device takeover and botnet recruitment
[Mitigation] Immediately apply the official firmware patch (v2.0.10 or later) and restrict access to the management interface