CVE-2025-9938

A weakness has been identified in D-Link DI-8400 16.07.26A1. The affected element is the function yyxzdlinkasp of the file /yyxz.asp. This manipulation of the argument ID causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...

D-Link DI-8400 安全漏洞

The D-Link DI-8400 is an enterprise-class Internet behavior management router from D-Link for medium to large enterprise network environments. The D-Link DI-8400 suffers from a stack buffer overflow vulnerability that originates from a stack-based buffer overflow in the parameter ID of the functi...

CVE-2025-9938

CVE-2025-9938 affects D-Link DI-8400 (firmware 16.07.26A1). The vulnerability is a stack-based overflow in the function yyxz_dlink_asp within /yyxz.asp, triggered by manipulating the ID argument. It supports remote initiation with a public exploit available. Documented impacts include arbitrary c...

CVE-2025-9938 D-Link DI-8400 yyxz.asp yyxz_dlink_asp stack-based overflow

A weakness has been identified in D-Link DI-8400 16.07.26A1. The affected element is the function yyxzdlinkasp of the file /yyxz.asp. This manipulation of the argument ID causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...

CVE-2025-9938 D-Link DI-8400 yyxz.asp yyxz_dlink_asp stack-based overflow

A weakness has been identified in D-Link DI-8400 16.07.26A1. The affected element is the function yyxzdlinkasp of the file /yyxz.asp. This manipulation of the argument ID causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...

MAL-2025-8400 Malicious code in @leaffm/leaf-connect-ringtons (npm)

The package @leaffm/leaf-connect-ringtons was found to contain malicious code...

The vulnerability of the usb_paswd.asp file in the jhttpd component of D-Link DI-8400 router software allows a hacker to induce a service failure.

The vulnerability of the usbpaswd.asp file of the jhttpd component in D-Link DI-8400 router microprogramming software is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

CVE-2025-8400

creationtimestamp| type| source ---|---|--- 2025-08-02 13:31:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvgbls3ahr2s...

CVE-2025-8400

CVE-2025-8400 concerns the Image Gallery WordPress plugin (Bee-Quick-Gallery) with a reflected Cross-Site Scripting vulnerability. The issue affects all versions up to 1.0.0 due to insufficient input sanitization and output escaping, enabling unauthenticated attackers to inject scripts that execu...

CVE-2025-8400 Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting

The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

CVE-2025-8400 Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting

The Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will...

WordPress Image Gallery plugin <= 1.0.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Image Gallery versions = 1.0.0...

CVE-2025-8175

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument shareenable leads to null pointer dereference. It is possible to initiate the attack...

D-Link DI-8400 Null Pointer Dereference Vulnerability

D-Link DI-8400 is an Internet Behavior Management router from D-Link designed for medium to large enterprise network environments, supporting 360 users with parallel access and full Gigabit port configuration. The D-Link DI-8400 suffers from a null pointer dereference vulnerability that originate...

CVE-2025-8175

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument shareenable leads to null pointer dereference. It is possible to initiate the attack...

CVE-2025-8175

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument shareenable leads to null pointer dereference. It is possible to initiate the attack...

CVE-2025-8175

CVE-2025-8175 affects D-Link DI-8400, version 16.07.26A1, where the jhttpd component’s usb_paswd.asp contains a vulnerable handling path for the parameter share_enable . Manipulating this argument triggers a null pointer dereference, enabling a remote attack and potentially causing a service cras...

CVE-2025-8175 D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument shareenable leads to null pointer dereference. It is possible to initiate the attack...

CVE-2025-8175 D-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference

A vulnerability was found in D-Link DI-8400 16.07.26A1. It has been classified as problematic. This affects an unknown part of the file usbpaswd.asp of the component jhttpd. The manipulation of the argument shareenable leads to null pointer dereference. It is possible to initiate the attack...

PT-2025-30946 · D Link · D-Link Di-8400

Name of the Vulnerable Software and Affected Versions: D-Link DI-8400 version 16.07.26A1 Description: A vulnerability exists in the jhttpd component of the software. The manipulation of the share enable argument in the usb paswd.asp file leads to a null pointer dereference. This issue can be...