CVE-2025-60551

The D-Link DIR600L wireless router, specifically running firmware version FW116WWb01 , is susceptible to a buffer overflow vulnerability. The root cause is the formDeviceReboot function's failure to properly validate the length of input data when processing the next_page parameter, leading to imp...

CVE-2025-60938

Emoncms version 11.7.3 is susceptible to a remote code execution (RCE) vulnerability within its firmware upload feature. The flaw exists in the /admin/upload-custom-firmware API endpoint due to insufficient input validation of user-controlled parameters, specifically filename, port, baud_rate, co...

CVE-2025-60549

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWANwizard4...

CVE-2025-60561

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEmail...

CVE-2025-60568

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall...

CVE-2025-60553

The D-Link DIR600L wireless router, specifically running firmware version FW116WWb01 , is vulnerable to a buffer overflow in the formSetWAN_Wizard52 function. The issue originates from the curTime parameter, which fails to correctly validate the length of the input data. A remote attacker could e...

CVE-2025-60569

The D-Link DIR600L wireless router is vulnerable to a buffer overflow in the formSetRoute function. The root cause is the improper validation of input data length when processing the curTime parameter, specifically during the copying of the buffer. An attacker could exploit this vulnerability to ...

CVE-2025-34500: Use of Hard-coded Cryptographic Key

Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and uses a truncated HMAC for integrity validation. Attackers with access to the update interface - typically via the unit's...

PT-2025-43653

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow issue. This occurs through the curTime parameter within the formSetWAN Wizard7 function. Recommendations At the momen...

CVE-2025-60569

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute...

CVE-2025-60572

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork...

PT-2025-43633

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery...

PT-2025-43637

Name of the Vulnerable Software and Affected Versions Nous W3 Smart WiFi Camera version 1.33.50.82 Description A flaw exists in the firmware update process of the Nous W3 Smart WiFi Camera. An attacker in close physical proximity, without needing to authenticate, can gain root access by providing...

CVE-2025-60571

D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS...

PT-2025-43659

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow issue. This occurs through the curTime parameter within the formSetWAN Wizard52 function. Recommendations At the...

PT-2025-43687

Name of the Vulnerable Software and Affected Versions Deck Mate 2 affected versions not specified Description The firmware update mechanism for Deck Mate 2 does not verify cryptographic signatures on update packages. Updates are encrypted using a single, hard-coded AES key shared across all devic...

CVE-2025-56438: Insufficient Verification of Data Authenticity

An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card...

CVE-2025-60555

The D-Link DIR600L wireless router, specifically firmware version FW116WWb01 , is vulnerable to a stack-based buffer overflow . This issue originates from the formSetWizardSelectMode function, where the software fails to properly validate the length of input data provided via the curTime paramete...

CVE-2025-60572

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork...

PT-2025-43638

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax firmware version FW116WWb01 contains a buffer overflow. This occurs through the curTime parameter within the formSetEnableWizard function. Recommendations Update to a newer...