Lucene search
+L

9854 matches found

CNVD
CNVD
•added 2025/09/25 12:00 a.m.•15 views

D-Link DIR-513 Buffer Overflow Vulnerability (CNVD-2025-23468)

D-Link DIR-513 is a wireless router product from China's AUO D-Link. The D-Link DIR-513 suffers from a buffer overflow vulnerability due to incorrect manipulation of the parameter webpage in the file /goform/formWPS, no details of the vulnerability are provided at this time...

9CVSS7.3AI score0.03247EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/24 9:22 p.m.•26 views

CVE-2025-10814

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

8.8CVSS6.6AI score0.06115EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/09/24 10:32 a.m.•32 views

CVE-2025-10792

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

9CVSS6.8AI score0.03247EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/09/24 12:00 a.m.•15 views

The vulnerability of the formWPS function in the /goform/formWPS file of the D-Link DIR-513 router’s microprogramming software allows a intruder to cause a service failure.

The vulnerability of the formWPS function in the /goform/formWPS module of the D-Link DIR-513 router’s microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the webpage parameter. Exploiting this vulnerability allows a...

9CVSS7.3AI score0.03247EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
•added 2025/09/24 12:00 a.m.•12 views

The vulnerability of the sub_415028 function in the goform/set_static_leases file of the microprogramming software for the D-Link DIR-823X router allows a hacker to execute arbitrary commands.

The vulnerability of the sub415028 function in the goform/setstaticleases module of the D-Link DIR-823X router software is related to the lack of data cleaning measures at the management level when processing the Hostname parameter. Exploiting this vulnerability allows an attacker to execute...

7.5CVSS7.4AI score0.04735EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/24 12:00 a.m.•15 views

The vulnerability of the /usr/sbin/goahead file in the microprogramming software for D-link DIR-823X allows a hacker to execute arbitrary commands.

The vulnerability of the /usr/sbin/goahead file in the microprogramming software for D-link DIR-823X routers is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.5CVSS6.9AI score0.06115EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2025/09/23 12:00 a.m.•16 views

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23470)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameters terminaladdr/serverip/serverport in the file /usr/sbin/goahead, which can be exploited by an attacker to cause...

8.8CVSS7.9AI score0.07359EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/23 12:00 a.m.•16 views

D-Link DIR-645 service parameter command injection vulnerability

D-Link DIR-645 is a Gigabit wireless router launched by D-Link in 2012, designed for home and SMB users. The D-Link DIR-645 suffers from a command injection vulnerability that stems from the parameter service in the file /soap.cgi failing to properly filter constructed command special characters,...

9.8CVSS7.7AI score0.04558EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/23 12:00 a.m.•14 views

D-Link DIR-852 cgibin file command injection vulnerability

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from a command injection vulnerability that originates from the parameter ST of the component Simple Servi...

8.8CVSS7.8AI score0.05363EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/23 12:00 a.m.•24 views

D-Link DIR-852 hedwig.cgi File Command Injection Vulnerability

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from a command injection vulnerability that stems from the Web Management Interface component...

8.8CVSS7.8AI score0.08849EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/22 9:15 p.m.•15 views

CVE-2025-10814

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

8.8CVSS5.7AI score0.06115EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/22 9:15 p.m.•17 views

CVE-2025-10814

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

8.8CVSS0.06115EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/09/22 8:32 p.m.•8 views

CVE-2025-10814 D-Link DIR-823X goahead command injection

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

6.5CVSS6.8AI score0.06115EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/22 8:32 p.m.•54 views

CVE-2025-10814

The CVE-2025-10814 entry concerns D-Link DIR-823X routers (versions 240126/240802/250416) with a vulnerability in /usr/sbin/goahead. An attacker can remotely inject commands by manipulating the port argument, leading to command execution. Public exploit information exists. No remediation details ...

8.8CVSS6.6AI score0.06115EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/09/22 8:32 p.m.•45 views

CVE-2025-10814 D-Link DIR-823X goahead command injection

A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly...

6.5CVSS0.06115EPSS
SaveExploits1References5
OSV
OSV
•added 2025/09/22 10:15 a.m.•16 views

CVE-2025-10792

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

8.7CVSS6.2AI score0.03247EPSS
SaveExploits1References6
NVD
NVD
•added 2025/09/22 10:15 a.m.•20 views

CVE-2025-10792

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

9CVSS0.03247EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/09/22 9:32 a.m.•40 views

CVE-2025-10792 D-Link DIR-513 formWPS buffer overflow

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

9CVSS0.03247EPSS
SaveExploits1References6
CVE
CVE
•added 2025/09/22 9:32 a.m.•48 views

CVE-2025-10792

D-Link DIR-513 A1FW110 is affected by a buffer overflow in the /goform/formWPS function caused by manipulation of the webpage argument. The issue can be exploited remotely and is considered high severity (CVSS ~8.8). Several sources confirm the vulnerability and remote feasibility, with exploit m...

9CVSS8.5AI score0.03247EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/22 9:32 a.m.•8 views

CVE-2025-10792 D-Link DIR-513 formWPS buffer overflow

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

9CVSS6.6AI score0.03247EPSS
SaveExploits1References6
Rows per page
Query Builder