Lucene search
+L

328 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2025-21344

Malicious code in bioql PyPI...

8.6CVSS7.1AI score0.00885EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/09/15 10:2 a.m.3 views

CVE-2025-10440 D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injection

A vulnerability has been found in D-Link DI-8100, DI-8100G, DI-8200, DI-8200G, DI-8003 and DI-8003G 16.07.26A1/17.12.20A1/19.12.10A1. Affected by this vulnerability is the function sub4621DC of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument hname leads to os comma...

6.5CVSS6.4AI score0.1211EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/09/15 12:0 a.m.4 views

D-Link多款产品 操作系统命令注入漏洞

D-Link DI-8100 and others are products of China AUO D-Link.D-Link DI-8100 is a wireless broadband router designed for small and medium-sized network environments.D-Link DI-8100G is a Gigabit Internet Behavior Management certified router.D-Link DI-8200 is an enterprise-class router. An OS command...

6.5CVSS6.8AI score0.1211EPSS
Exploits0References6
OSV
OSV
added 2025/08/25 3:15 p.m.7 views

CVE-2025-51281

D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en, val and id parameters in the qjasp function. This vulnerability allows authenticated attackers to cause a Denial of Service DoS by sending crafted GET requests with overly long values for these parameters...

7CVSS5.9AI score0.00417EPSS
Exploits1References2
NVD
NVD
added 2025/08/25 3:15 p.m.6 views

CVE-2025-51281

D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en, val and id parameters in the qjasp function. This vulnerability allows authenticated attackers to cause a Denial of Service DoS by sending crafted GET requests with overly long values for these parameters...

7CVSS0.00417EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/08/25 12:0 a.m.3 views

CVE-2025-51281

D-Link DI-8100 16.07.26A1 is vulnerable to Buffer Overflow via the en, val and id parameters in the qjasp function. This vulnerability allows authenticated attackers to cause a Denial of Service DoS by sending crafted GET requests with overly long values for these parameters...

6.8AI score0.00417EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/08/25 12:0 a.m.5 views

PT-2025-34661 · D Link · Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 16.07.26A1 Description: The D-Link DI-8100 version 16.07.26A1 is susceptible to a buffer overflow issue. This occurs through the qj asp function when processing crafted GET requests containing excessively long values fo...

7CVSS6.5AI score0.00417EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.7 views

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a wireless broadband router designed for small to medium-sized network environments from China AUO D-Link. A security vulnerability exists in the D-Link DI-8100 version 16.07.26A1, which originates from a buffer overflow in the en, val, and id parameters of the qjasp functio...

7CVSS7.1AI score0.00417EPSS
Exploits1References3
CVE
CVE
added 2025/08/25 12:0 a.m.20 views

CVE-2025-51281

CVE-2025-51281 affects the D-Link DI‑8100, version 16.07.26A1. The vulnerability is a buffer overflow in the qj_asp function triggered by crafted GET requests with overly long en, val, and id parameters, allowing authenticated attackers to cause a Denial of Service. No explicit exploitation steps...

7CVSS6.8AI score0.00417EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-8100 Malicious code in @juigorg/mollitia-sint (npm)

The package @juigorg/mollitia-sint was found to contain malicious code...

7.2AI score
Exploits0
Patchstack
Patchstack
added 2025/08/05 11:2 p.m.10 views

WordPress Element Pack Elementor Addons plugin <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Open Street Map Widget Marker Content vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 8.1.5...

5.4CVSS3.6AI score0.03338EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/29 12:0 a.m.8 views

The vulnerability of the jingx_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the jingxasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a specially crafted HTTP request...

9CVSS7.5AI score0.00885EPSS
Exploits1References6Affected Software1
CNVD
CNVD
added 2025/07/25 12:0 a.m.3 views

D-Link DI-8100 Buffer Overflow Vulnerability

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium-sized network environments. It supports 4 Internet ports and 4 LAN ports, and utilizes a network-specific processor to meet the needs of 80 devices for simultaneous networking. The D-Link DI-8100 suffers from a buff...

9CVSS8.2AI score0.03327EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.18 views

The vulnerability of the menu_nat_asp() function in D-Link DI-8100 router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the menunatasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

9CVSS8.1AI score0.00771EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.9 views

The vulnerability of the upnp_ctrl_asp() function in the JHTTPD web server of the D-Link DI-8100 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the upnpctrlasp function in the JHTTPD web server of the D-Link DI-8100 microprogrammed router software is related to the execution of operations outside the buffer in memory when processing the removeextproto and removeextport parameters. Exploitation of this vulnerability...

9CVSS8AI score0.01345EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.7 views

The vulnerability of the sprintf() function in the JHTTPD web server of D-Link’s router software DI-8100 allows a hacker to execute arbitrary code.

The vulnerability of the sprintf function in the JHTTPD web server of the D-Link DI-8100 router microprogramming system is related to the execution of operations outside the buffer during the processing of the mx parameter. Exploiting this vulnerability allows a remote attacker to execute arbitra...

9CVSS8.4AI score0.01122EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2025/07/23 12:0 a.m.7 views

D-Link DI-8100 Buffer Overflow Vulnerability (CNVD-2025-16668)

The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from the improper handling of the parameters removeextproto/removeextport by the sprintf function in the /upnpctrl.asp file of the...

9.8CVSS8.3AI score0.01345EPSS
Exploits0References1
CNVD
CNVD
added 2025/07/23 12:0 a.m.5 views

D-Link DI-8100 Buffer Overflow Vulnerability

The D-Link DI-8100 is an enterprise-class router from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from an insufficient checksum of parameter mx in the sprintf function in the /ddns.asp?opt=add file of component jhttpd. The vulnerability can b...

9CVSS8.2AI score0.01122EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/23 12:0 a.m.8 views

D-Link DI-8100 Buffer Overflow Vulnerability

The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 16.07.26A1, which stems from improper handling of the outaddr/inaddr/outport/proto parameters in the /menunat.asp file in the HTTP request processing component...

9CVSS8.2AI score0.00771EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/22 11:4 p.m.11 views

CVE-2025-7911

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...

9.8CVSS7.4AI score0.01345EPSS
Exploits0References1
Rows per page
Query Builder