CVE-2025-7790

The CVE-2025-7790 entry concerns the D-Link DI-8100 router, firmware 16.07.26A1. A stack-based buffer overflow exists in the HTTP Request Handler, specifically in the /menu_nat.asp/file handling of arguments out_addr/in_addr/out_port/proto, which can be triggered remotely. Public exploits have be...

PT-2025-30219 · D Link · Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 1.0 Description: A critical issue exists in the D-Link DI-8100 device. The sprintf function within the /ddns.asp?opt=add file, part of the jhttpd component, is susceptible to a stack-based buffer overflow. Manipulation ...

PT-2025-30220 · Unknown +1 · Boa Web Server +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 version 1.0 Description: A critical vulnerability exists in the Boa Webserver component of the affected product. The sprintf function within the /goform/formLanSetupRouterSettings file is susceptible to a stack-based buffer...

D-Link DIR-818LW Command Injection Vulnerability

The D-Link DIR-818LW is a dual-band Gigabit cloud router that supports wireless standards such as IEEE 802.11ac and IEEE 802.11n, with a wireless transfer rate of up to 433Mbps, and also provides one USB 2.0 port and four Gigabit wired ports. The D-Link DIR-818LW suffers from a command injection...

PT-2025-30221 · Unknown +1 · Boa Web Server +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 version 1.10 Description: A critical vulnerability exists in the Boa Webserver component of the D-Link DIR-513. The sprintf function within the /goform/formSetWanNonLogin file is susceptible to a stack-based buffer overflow whe...

PT-2025-30223 · D Link · Di-8100 +1

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 1.0 Description: A critical vulnerability exists in the sprintf function within the jhttpd component of D-Link DI-8100 version 1.0. Manipulation of the remove ext proto/remove ext port argument in the /upnp ctrl.asp fil...

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 16.07.26A1, which stems from improper handling of the outaddr/inaddr/outport/proto parameters in the /menunat.asp file in the HTTP request processing component...

CVE-2025-7762

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menunatmore.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotel...

CVE-2025-7762

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menunatmore.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotel...

CVE-2025-7762 D-Link DI-8100 HTTP Request menu_nat_more.asp stack-based overflow

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menunatmore.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotel...

CVE-2025-7762 D-Link DI-8100 HTTP Request menu_nat_more.asp stack-based overflow

A vulnerability, which was classified as critical, has been found in D-Link DI-8100 16.07.26A1. This issue affects some unknown processing of the file /menunatmore.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotel...

CVE-2025-7762

CVE-2025-7762 affects D-Link DI-8100 (16.07.26A1). The flaw is in the HTTP Request Handler's /menu_nat_more.asp processing, where input length is not properly validated, causing a stack-based buffer overflow. It can be triggered remotely and the exploit has been publicly disclosed. Multiple sourc...

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium-sized network environments. It supports 4 Internet ports and 4 LAN ports, and utilizes a network-specific processor to meet the needs of 80 devices for simultaneous networking. The D-Link DI-8100 suffers from a buff...

CVE-2025-34125

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the...

CVE-2025-34125 D-Link DSP-W110A1 Cookie Command Injection

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the...

CVE-2025-34125 D-Link DSP-W110A1 Cookie Command Injection

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the...

CVE-2025-34125

CVE-2025-34125 describes an unauthenticated command injection in the D-Link DSP-W110A1 cookie handling of the lighttpd web server, affecting firmware 1.05B01. The root cause is processing of specially crafted cookie values that allows remote attackers to execute arbitrary commands on the underlyi...

CVE-2025-7603

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. Affected is an unknown function of the file /jingx.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploi...

CVE-2025-7602

A vulnerability was found in D-Link DI-8100 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /arpsys.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2025-7553

A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...