25341 matches found
CVE-2025-12296: Improper Neutralization of Special Elements used in an OS Command
A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be...
PT-2025-44031
Name of the Vulnerable Software and Affected Versions D-Link DI-7001 MINI versions 19.09.19A1 through 24.04.18B1 Description A flaw exists in D-Link DI-7001 MINI that allows for command injection. This occurs due to improper handling of the cmd argument within an unknown function of the /msp...
D-Link DIR-852 Router Disclosure Information
The vulnerability of the phpcgimain function in D-Link DIR-852 router microprogramming software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...
ncc2 for D-Link DIR-820L Unauthorized Access
The vulnerability of the ncc2 microprogramming software for D-Link DIR-820L routers is related to deficiencies in access control when processing the /getset.ccp endpoint. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protect...
D-Link DIR600L Router Code Execution
The vulnerability of the formLanSetupRouterSettings function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability allows a remote attacker to...
CVE-2025-60556
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizard1...
CVE-2025-60565
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSchedule...
CVE-2025-60547
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWANWizard7...
CVE-2025-60552
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup...
CVE-2025-60561
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail...
CVE-2025-60554
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEnableWizard...
CVE-2025-60549
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWANwizard4...
CVE-2025-60569
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute...
CVE-2025-60570
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery...
CVE-2025-60559
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetDomainFilter...
CVE-2025-60572
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork...
CVE-2025-60550
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone...
CVE-2025-60564
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog...