sub_424054() and sub_41EA94() functions Code Execution

The vulnerability of the sub424054 and sub41EA94 functions in the embedded web server of D-Link’s router microprogramming systems DIR-822K and DWR-M920 is related to the escape of operations from the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a...

D-Link DIR-822K Embedded Web Server Code Execution

The vulnerability of the sub4151FC and sub41491C functions in the embedded web server of D-Link’s DIR-822K and DWR-M920 router microprogramming systems is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability...

sub_458E40() and sub_463560() functions Code Execution

The vulnerability of the sub458E40 and sub463560 functions in the embedded web server of D-Link’s router microprogramming systems DIR-822K and DWR-M920 relates to the escape of operations from the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows an...

sub_414BA8() and sub_4138B0() functions Code Execution

The vulnerability of the sub414BA8 and sub4138B0 functions in the embedded web server of D-Link’s DIR-822K and DWR-M920 router microprogramming systems is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability...

D-Link DIR-822K Router Sub_455524 Function Heap Buffer Overflow DoS

The vulnerability of the sub455524 function in D-Link DIR-822K router microprogramming software is related to the execution of operations outside the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or caus...

D-link DIR-878A1 USB storage processor Code Execution

The vulnerability of the USB storage processor module in D-link DIR-878A1 software routers is related to buffer overflows in the stack during the processing of the Serial Number field. Exploiting this vulnerability allows an attacker to execute arbitrary code...

HNAP Code Execution

The vulnerability of the HNAP microprogramming software for D-Link DIR-868L routers lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...

VulnCheck KEV: CVE-2024-10915

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. T...

D-link DIR-878A1 Router SetNetworkSettings Command Execution

The vulnerability of the SetNetworkSettings function in the prog.cgi script of the D-link DIR-878A1 router’s microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary comman...

kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare

A slab-out-of-bounds exists in the linux kernel in efivarfsdcompare, such that the issue can be triggered by parallel lookups using an invalid filename due to an incorrect memcmp function...

D-Link Router Full Access

The vulnerability of the Setting Handler component in D-Link’s router microprogramming software, including the DSR-150, DSR-150N, and DSR-250 models, is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full acces...

D-Link DIR-816L Router Code Execution

The vulnerability of the authenticationcgimain function in D-Link DIR-816L router microprogramming software allows a hacker to execute arbitrary code...

D-Link DSP-W110A1 Router CookieHandler Arbitrary Command Execution

The vulnerability of the CookieHandler component in D-Link’s DSP-W110A1 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-13562

A vulnerability was identified in D-Link DIR-852 1.00. This issue affects some unknown processing of the file /gena.cgi. Such manipulation of the argument service leads to command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This vulnerabili...

CVE-2025-13552

A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploi...

CVE-2025-13553

A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub41C7FC of the file /boafrm/formPinManageSetup. This manipulation of the argument submit-url causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...

CVE-2025-13550

A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be executed remotely. The exploit has bee...

CVE-2025-13551

A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. The attack is possible to be carried out remotely. Th...

CVE-2025-13549

A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be use...

CVE-2025-13547

A flaw has been found in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The exploit has been published and may be used...