D-Link DIR ST Header 命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/Threekiii/Awesome-POC/blob/master/%E7%BD%91%E7%BB%9C%E8%AE%BE%E5%A4%87%E6%BC%8F%E6%B4%9E/D-Link%20DIR-802%20%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%20CVE-2021-29379.md
• https://github.com/t0ptop/D-Link-DIR-825
• https://github.com/master-abc/cve/issues/22
• https://feedly.com/cve/CVE-2025-10629
• https://rules.evebox.org/pub/et/open/2064797
• https://www.sentinelone.com/vulnerability-database/cve-2025-10629/
• https://vuldb.com/submit/629946
• https://vuldb.com/submit/650660
• https://community.emergingthreats.net/t/ruleset-update-summary-2025-09-18-v11019/3042
• https://rules.evebox.org/pub/et/open/2064797
• https://community.roonlabs.com/t/roonlabs-nucleus-unifi-network-threat-detection-cve-2025-10629/306737
• https://www.snort.org/rule_docs/1-66425

Related Vulnerabilities

• PoCCVE-2026-86206: N-able N-central - Access Control Bypass via Path Confusion and Forwarded Header Spoofing
• PoCCVE-2026-20896: Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass
• PoCfastly-debug-headers: Fastly CDN Debug Headers Exposure
• PoCCVE-2025-29635: D-Link DIR-823X set_prohibiting - Command Injection
• D-Link NAS /cgi-bin/account_mgr.cgi 命令执行漏洞（CVE-2024-10915）
• PoCdlink-dsl2600u-rom0-disclosure: D-Link DSL2600U - Unauthenticated rom-0 Configuration Disclosure
• D-Link DNS-ShareCenter /cgi-bin/gui_mgr.cgi 命令执行漏洞（CVE-2026-4204）
• D-Link DNS-ShareCenter /cgi-bin/download_mgr.cgi 命令执行漏洞（CVE-2026-4197）
• PoCCVE-2025-50578: Heimdall - Host Header Injection & Open Redirect
• PoCCVE-2025-58044: JumpServer - Open Redirect via Referer Header
• PoCD-Link DNS-ShareCenter /cgi-bin/webdav_mgr.cgi 命令执行漏洞（CVE-2024-8132）
• PoCD-Link DNS-ShareCenter /cgi-bin/app_mgr.cgi 命令执行漏洞（CVE-2026-4205）
• D-Link DNS-ShareCenter /cgi-bin/apkg_mgr.cgi 命令执行漏洞（CVE-2024-8131）