PT-2026-91120

Name of the Vulnerable Software and Affected Versions D-Link DWR-M921 version 1.1.52 Description A remote OS command injection issue exists in the /boafrm/formDiskCreateShare file. The flaw occurs within the system function when the folderpath variable is manipulated, allowing an attacker to...

PT-2026-31372

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to inadequate input validation on the name parameter within the '/qos type asp.asp' API endpoint. Recommendations Ensure proper input validation is implemented for the...

PT-2025-29460 · D Link · Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 16.07.26A1 Description: A critical issue exists in the HTTP Request Handler component of the D-Link DI-8100. The vulnerability is a stack-based buffer overflow caused by manipulation of an unknown function within the...

PT-2025-7108 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version 1.01 Description: An OS command injection issue was discovered, allowing attackers to execute arbitrary operating system commands via crafted packets. This is achieved through the samba wg and samba nbn parameters...

Exploit for Use of Hard-coded Credentials in Dlink Dns-320L_Firmware

Dinkleberry 🫐 Are you one of the 92,000+ people1 stuck with a...

PT-2022-23826 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: The issue is related to Command Injection via the "/goform/SystemCommand" API endpoint. When a user passes in the command parameter, it is spliced into byte 4836B0 by snprintf, and then...