D-Link DIR-878 - Command Injection

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.dlink.com/uk/en/support/support-news/2022/october/27/dir_878-rev-ax-command-injection-vulnerability
• https://www.bleepingcomputer.com/news/security/d-link-warns-of-new-rce-flaws-in-end-of-life-dir-878-routers/
• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10293
• https://nvd.nist.gov/vuln/detail/cve-2019-8313
• https://vuldb.com/vuln/280778
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10475
• https://www.twcert.org.tw/en/cp-139-5975-6a5d9-2.html
• https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60676.md
• https://app.opencve.io/cve/?product=dir-878_firmware&vendor=d-link
• https://www.fortiguard.com/encyclopedia/ips/55094

Related Vulnerabilities

• PoCCVE-2025-51683: mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE
• PoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL Injection
• PoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
• PoCCVE-2026-21875: ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection
• PoCCVE-2026-56292: AcyMailing < 10.11.1 - Unauthenticated SQL Injection
• PoCCVE-2026-59509: cve-search 4.0-6.0.0 - Unauthenticated NoSQL Injection
• PoCCVE-2026-9586: Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection
• 思考軟體科技｜電子柵欄 - SQL Injection
• 綠色運算｜NUMail - OS Command Injection
• PoCCVE-2026-65761: Joomla Easy Store - SQL Injection
• PoCCVE-2023-25826: OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection
• PoCCVE-2020-10221: rConfig <= 3.9.4 - Authenticated OS Command Injection
• PoCCVE-2026-76904: GeoServer jsonArrayContains CQL Filter - SQL Injection