CVE-2025-2359 D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization

A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B0520181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authorization. It is possible to launch the attack...

CVE-2025-2359 D-Link DIR-823G DDNS Service HNAP1 SetDDNSSettings improper authorization

A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B0520181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authorization. It is possible to launch the attack...

CVE-2025-2359

CVE-2025-2359 affects D-Link DIR-823G firmware version 1.0.2B05_20181207, specifically the DDNS Service component’s SetDDNSSettings function in the /HNAP1/ path. The flaw, caused by improper authorization when manipulating the SOAPAction argument, enables a remote attacker to exploit the vulnerab...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from an authorization issue vulnerability that stems from improper authorization, no details of the vulnerability are provided at this time...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from an authorization issue vulnerability that stems from improper authorization and can be exploited by an attacker to cause access control to sensitive content...

CVE-2025-2359: Improper Authorization

A vulnerability classified as critical has been found in D-Link DIR-823G 1.0.2B0520181207. Affected is the function SetDDNSSettings of the file /HNAP1/ of the component DDNS Service. The manipulation of the argument SOAPAction leads to improper authorization. It is possible to launch the attack...

CVE-2025-2360: Improper Authorization

A vulnerability classified as critical was found in D-Link DIR-823G 1.0.2B0520181207. Affected by this vulnerability is the function SetUpnpSettings of the file /HNAP1/ of the component UPnP Service. The manipulation of the argument SOAPAction leads to improper authorization. The attack can be...

PT-2025-11453

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version 1.0.2B05 20181207 Description A critical vulnerability has been found in the DDNS Service of D-Link DIR-823G. The function SetDDNSSettings of the file /HNAP1/ is affected. The manipulation of the argument SOAPAction lea...

PT-2025-11373

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version 1.0.2B05 20181207 Description A critical vulnerability was found in the D-Link DIR-823G, affecting the SetUpnpSettings function of the UPnP Service component. The manipulation of the SOAPAction argument leads to imprope...

PT-2025-16713

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A leak has been fixed in the spufs new file function. This function is called from spufs fill dir, and in case of failure, the caller will perform spufs rmdir, which removes everything...

CVE-2025-2215: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical was found in Doufox up to 0.2.0. Affected by this vulnerability is an unknown functionality of the file /?s=doudou&c=file&a=list. The manipulation of the argument dir leads to path traversal. The attack can be launched remotely. The exploit has been disclose...

CVE-2025-2215

A vulnerability classified as critical was found in Doufox up to 0.2.0. Affected by this vulnerability is an unknown functionality of the file /?s=doudou&c=file&a=list. The manipulation of the argument dir leads to path traversal. The attack can be launched remotely. The exploit has been disclose...

Malicious code in dir-size-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f803eeed1967e8ae2cd3095d6f293153fe8b5574bbef8aa2191c4b2f862658f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-10980

Name of the Vulnerable Software and Affected Versions: Doufox versions up to 0.2.0 Description: A critical issue was found in Doufox, affecting an unknown functionality of the file "/?s=doudou&c=file&a=list". The manipulation of the dir argument leads to path traversal. This issue can be exploite...

PT-2025-12719

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126/240802 Description A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the function sub 41710C of the file /goform/diag nslookup. The manipulation of the target add...

D-Link DIR-600 Multiple Vulnerabilities (2013 - 2024)

D-Link DIR-600 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the FUN_00412244() function in D-link DIR-823X router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the FUN00412244 function in D-link DIR-823X router microprogramming software is related to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service failure...

The vulnerability in the form2AddVrtsrv.cgi script of the Virtual Service Handler component of the D-Link DIR-816 A2 router microprogramming system, which allows a attacker to compromise the integrity of protected information.

The vulnerability of the form2AddVrtsrv.cgi script of the Virtual Service Handler component in the D-Link DIR-816 A2 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected...

The vulnerability of the DDNS service in the D-Link DIR-816 A2 router software allows a hacker to compromise the integrity of the protected information.

The vulnerability of the DDNS service in the D-Link DIR-816 A2 router software lies in its lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

The vulnerability in the form2Dhcpd.cgi script of the DHCPD Setting Handler component of the D-Link DIR-816 A2 router’s microprogramming system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the form2Dhcpd.cgi script within the DHCPD Setting Handler component of the D-Link DIR-816 A2 router’s microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protecte...