PT-2026-31336

Name of the Vulnerable Software and Affected Versions D-Link DI-8300 version 16.07.26A1 Description A buffer overflow exists in the ip position asp function via the ip parameter. Attackers can leverage this to cause a Denial of Service DoS by providing a crafted input. Recommendations Update to a...

PT-2026-31372

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to inadequate input validation on the name parameter within the '/qos type asp.asp' API endpoint. Recommendations Ensure proper input validation is implemented for the...

CVE-2025-50672

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /yyxzdlink.asp endpoint...

CVE-2025-52222

D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rden, rdauth, rdacct, httphadmin,...

CVE-2025-50654

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thdmember.asp endpoint...

D-Link DI-8003 security vulnerability

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the tggl.asp script, which can be exploited by an attacker to cause a denial of service...

D-Link DI-8003 security vulnerability

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect parameter boundary checking in the /yyxzdlink.asp endpoint and can be exploited by an attacker to cause a denial of servi...

PT-2026-31381

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the pid parameter in the /trace.asp endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability. As a tempora...

PT-2026-31379

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper validation of the id parameter in the '/thd member.asp' API endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability...

CVE-2025-50660

A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (version 16.07.26A1 ). The flaw is caused by the improper validation of the length and size of input data for the name parameter in the /url_member.asp endpoint. A remote attacker can exploit this by sending ...

CVE-2025-50646

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qostypeasp.asp endpoint...

CVE-2025-50661

A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (version 16.07.26A1 ). The flaw is caused by the improper handling of multiple parameters—specifically name, en, ips, u, time, act, rpri, and log —within the /url_rule.asp endpoint. A remote attacker can expl...

PT-2026-31402

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of parameters in the /xwgl bwr.asp endpoint. An attacker can exploit this by sending a crafted HTTP GET request using the name, qq, and time...

📄 ASP.net 8.0.10 HTTP Request Smuggling / Authentication Bypass

ASP.net version 8.0.10 suffers from HTTP request smuggling, bypass, and server-side request forgery vulnerabilities. Exploit Title: ASP.net 8.0.10 - Bypass Date: 2025-11-03 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CV...

ASP.net 8.0.10 - Bypass

Exploit Title: ASP.net 8.0.10 - Bypass Date: 2025-11-03 Author: Mohammed Idrees Banyamer Author Country: Jordan Instagram: @banyamersecurity GitHub: https://github.com/mbanyamer CVE: CVE-2025-55315 Tested on: .NET Kestrel unpatched - ASP.NET Core on localhost lab environment Platform: remote Type...

VulnCheck KEV: CVE-2023-36899

ASP.NET Elevation of Privilege Vulnerability...

CVE-2018-25205 ASP.NET jVideo Kit 1.0 SQL Injection via query Parameter

ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search functionality. Attackers can submit malicious SQL payloads via GET or POST requests to the /search endpoint to extract sensitive...

CVE-2018-25205 ASP.NET jVideo Kit 1.0 SQL Injection via query Parameter

ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search functionality. Attackers can submit malicious SQL payloads via GET or POST requests to the /search endpoint to extract sensitive...

CVE-2018-25205

CVE-2018-25205 concerns ASP.NET jVideo Kit 1.0, where a vulnerability in the search functionality allows unauthenticated SQL injection via the query parameter in the /search endpoint. Attackers can submit malicious payloads through GET or POST requests to extract sensitive database information us...

CVE-2019-25594

ASPRunner.NET 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the table name field. Attackers can input a buffer of 10000 characters in the table name parameter during database table creation to trigge...