CVE-2025-25746

D-Link DIR-853 A1 with firmware FW1.20B07 is affected by a stack-based buffer overflow in the SetWanSettings module, triggered by the Password parameter. The vulnerability affects the DIR-853 A1; details in PT-2025-7104 and CVE-2025-25746 indicate a critical issue (CVSS 9.8). There is no publishe...

CVE-2025-25743: Improper Neutralization of Special Elements used in a Command

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a command injection vulnerability in the SetVirtualServerSettings module...

CVE-2025-25741

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module...

CVE-2025-25741: Stack-based Buffer Overflow

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module...

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a router from China's AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the AccountPassword parameter in the SetSysEmailSettings module not properly handling user input. No details of the vulnerability are provided at this time...

CVE-2025-25742

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module...

CVE-2025-25742

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module...

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetWanSettings module not properly handling user input. No details of the vulnerability are provided at this time...

CVE-2025-25741

The D-Link DIR-853 A1 router, specifically running firmware FW1.20B07 , is vulnerable to a stack-based buffer overflow . This flaw exists within the SetIPv6PppoeSettings module, specifically in the prog.cgi script, caused by the improper handling of the IPv6_PppoePassword parameter. An unauthenti...

The vulnerability in the formDMZ.cgi script of the D-Link DIR-816A router’s software allows a attacker to execute arbitrary code.

The vulnerability of the formDMZ.cgi script in the D-Link DIR-816A2 router’s microprogramming software is related to the incorrect use of standard permissions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created HTTP POST request...

PT-2025-6039

Name of the Vulnerable Software and Affected Versions Revolution Pi version 2022-07-28-revpi-buster Description The issue allows an authenticated attacker to list device directories via the "/pictory/php/getFileList.php" endpoint in the dir parameter. This could potentially be exploited to gain...

KUNBUS Revolution Pi 路径遍历漏洞

KUNBUS Revolution Pi is an open, modular and cost-effective Raspberry Pi based industrial PC from KUNBUS. A path traversal vulnerability exists in the KUNBUS Revolution Pi, which stems from the dir parameter of the /pictory/php/getFileList.php page containing a path traversal vulnerability...

CVE-2025-1103

A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function setwifiblacklists of the file /goform/setwifiblacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereferenc...

CVE-2025-1103 D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference

A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function setwifiblacklists of the file /goform/setwifiblacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereferenc...

CVE-2025-1103 D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereference

A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function setwifiblacklists of the file /goform/setwifiblacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereferenc...

CVE-2025-1103

CVE-2025-1103 affects D-Link DIR-823X (versions 240126–240802). The vulnerability resides in the HTTP POST Request Handler: set_wifi_blacklists (/goform/set_wifi_blacklists). Manipulating the macList argument triggers a null pointer dereference, with remote exploitability and public disclosure. P...

PT-2025-7098

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version 1.20B07 Description: A stack-based buffer overflow issue was discovered via the PSK parameter in the SetQuickVPNSettings module. This issue can be exploited, potentially leading to unauthorized access or control...

PT-2025-7103

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07 Description: A stack-based buffer overflow issue was discovered via the Password parameter in the SetQuickVPNSettings module. This allows for potential exploitation. No information is provided about the...

PT-2025-7102 · D Link · D-Link Dir-853

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07 Description: A stack-based buffer overflow issue was discovered through the Password parameter in the SetDynamicDNSSettings module. This allows for potential exploitation. No information is provided about t...

CVE-2025-1103: NULL Pointer Dereference

A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function setwifiblacklists of the file /goform/setwifiblacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereferenc...