CVE-2025-4753

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this issue is some unknown functionality of the file /login.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2025-4755 D-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authentication

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-4755

CVE-2025-4755 affects D-Link DI-7003GV2 (Firmware 24.04.18D1 R(68125)). The vulnerability is in the function sub_497DE4 in the file /H5/netconfig.asp , leading to improper authentication . Exploitation can be performed remotely and public disclosures exist. A PT-Security advisory recommends a tem...

CVE-2025-4753 D-Link DI-7003GV2 login.data information disclosure

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this issue is some unknown functionality of the file /login.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2025-4753

CVE-2025-4753 concerns D-Link DI-7003GV2 (firmware 24.04.18D1 R(68125)). The issue is an information disclosure via the /login.data file caused by improper access control, enabling remote attack and exposing sensitive information. Multiple sources confirm the affected product, vulnerability class...

CVE-2025-4753 D-Link DI-7003GV2 login.data information disclosure

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this issue is some unknown functionality of the file /login.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2025-4752 D-Link DI-7003GV2 install_base.data information disclosure

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /installbase.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has bee...

CVE-2025-4751 D-Link DI-7003GV2 index.data information disclosure

A vulnerability, which was classified as problematic, was found in D-Link DI-7003GV2 24.04.18D1 R68125. Affected is an unknown function of the file /index.data. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-4749

A vulnerability classified as critical was found in D-Link DI-7003GV2 24.04.18D1 R68125. This vulnerability affects the function sub4983B0 of the file /H5/backup.asp?opt=reset of the component Factory Reset Handler. The manipulation leads to denial of service. The attack can be initiated remotely...

Intel Graphics Drivers 后置链接漏洞

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. Intel Graphics Drivers suffers from a back-link vulnerability that stems from improper link resolution and could lead to elevation of privilege via local access...

CVE-2025-4453

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure...

CVE-2025-4451

A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWANWizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about thi...

PT-2025-23600 · D Link · D-Link Di-500Wf-Wt

Name of the Vulnerable Software and Affected Versions: D-Link DI-500WF-WT versions up to 20250511 Description: A critical issue has been found, affecting the function sub 456DE8 of the file "/msp info.htm?flag=cmd" in the component "/usr/sbin/jhttpd". The manipulation of the cmd argument leads to...

CVE-2024-9524

CVE-2024-9524 is a local privilege escalation affecting Avira Prime System Speedup Service on Windows 10 x64 (Avira Prime 1.1.96.2). The flaw arises from mishandling symbolic links and a TOCTTOU race, allowing a low-privileged attacker to create a symbolic link and escalate to SYSTEM to execute a...

CVE-2024-13960 Link Following Local Privilege Escalation Vulnerability in AVG TuneUp Version 23.4

Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 build 15592 on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU time-of-check to...

CVE-2025-4453

A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argument sysCmd leads to command injection. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure...

CVE-2025-4451

A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWANWizard52. The manipulation of the argument curTime leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about thi...

CVE-2025-4448 D-Link DIR-619L formEasySetupWizard buffer overflow

A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

PT-2025-20561

Name of the Vulnerable Software and Affected Versions Norton Utilities Ultimate version 24.2.16862.6344 Description The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a time-of-check to...

CVE-2025-4443 D-Link DIR-605L sub_454F2C command injection

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub454F2C. The manipulation of the argument sysCmd leads to command injection. The attack may be initiated remotely. The vendor was contacted early about this disclosure. This...