39 matches found
CVE-2026-91001
A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddnsasp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiate...
CVE-2026-91001 D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow
A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddnsasp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiate...
CVE-2026-91001
A stack-based buffer overflow exists in the D-Link DI-8400 (firmware 16.07 ) in the function ddns_asp of the file /ddns.asp , part of the DDNS Configuration component. Manipulating the arguments serv , user , host , wild , mx , bmx , cust , or ip triggers the overflow. The attack can be initiated...
EUVD-2026-78273
A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddnsasp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiate...
CVE-2020-26733
CVE-2020-26733 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 크로스 사이트 스크립팅XSS 취약점 설명 SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16의 설정 페이지에 있는 크로스 사이트 스크립팅XSS 취약점으로, 인증된 공격자가 DDNS 설정 섹션을 통해 페이지에 자신의 스크립트를 주입할 수 있습니다. 추가 정보 대응책은 적절한 응답 헤더를 사용합니다. HTML이나...
CVE-2026-51630
An incorrect access control flaw in the getDdnsCfg function of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) allows an unauthenticated attacker on the same network segment to send a crafted POST request to /cgi-bin/cstecgi.cgi and retrieve the router's DDNS configuration , including dom...
GeoVision GV-LPC2011 and GV-LPC2211 Improper Neutralization of Special Elements used in an OS Command (CVE-2026-42364)
An os command injection vulnerability exists in the DdnsSetting.cgi functionality of GeoVision LPC2011/LPC2211 1.10. A specially crafted DDNS configuration can lead to arbitrary command execution. An attacker can modify a configuration value to trigger this vulnerability. This plugin only works...
PT-2026-30749
A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313 b20191024. Impacted is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument provider leads to os command injection. The attack may be launched remotely. The exploit has been disclosed...
Zyxel多款产品 操作系统命令注入漏洞
Zyxel USG FLEX, among others, are products of the Chinese company Zyxel. Zyxel USG FLEX is a firewall. Zyxel ATP is also a firewall. Zyxel USG FLEX 50W/USG20W-VPN is a series of firewalls. Several Zyxel products have vulnerabilities related to operating system command injection. These...
TOTOLINK A3300R setDdnsCfg function buffer overflow vulnerability
TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a buffer overflow vulnerability that originates from the failure of the function setDdnsCfg in the file...
CVE-2025-11386
A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit...
CVE-2025-11328
A vulnerability was detected in Tenda AC18 15.03.05.196318. This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be...
EUVD-2020-19271
Malware in sbrugna...
EUVD-2018-10725
Malware in sbrugna...
EUVD-2014-8490
Malware in sbrugna...
Tenda AC15 安全漏洞
Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 has a stack buffer overflow vulnerability, which originates from the parameter ddnsEn in th...
CVE-2025-11328
A vulnerability was detected in Tenda AC18 15.03.05.196318. This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be...
CVE-2025-11328
CVE-2025-11328 affects Tenda AC18 (firmware 15.03.05.19(6318)). The flaw is a stack-based buffer overflow in /goform/SetDDNSCfg caused by improper validation of the ddnsEn parameter, enabling remote, unauthenticated code execution or crash. Multiple sources corroborate the vulnerability and descr...