PT-2026-31405

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the http lanport parameter in the '/webgl.asp' API endpoint. Recommendations Update to a newer version that contains a fix for this vulnerabilit...

CVE-2025-50662

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...

CVE-2025-50655

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thdgroup.asp endpoint...

CVE-2025-50671

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglref.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with excessively long strings in parameters name, en, userid, shibiename, time,...

PT-2026-31337

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx asp function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the thdgroup.asp script and can be exploited by an attacker to cause a denial of service...

CVE-2025-50666

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /webpost.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, userid, log, and time...

CVE-2025-50671

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglref.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with excessively long strings in parameters name, en, userid, shibiename, time,...

CVE-2025-50669

The CVE-2025-50669 issue affects D-Link DI-8003 (16.07.26A1) and DI-8003G (19.12.10A1) due to improper handling of the wan_ping parameter in the /wan_ping.asp endpoint, causing a buffer overflow. Multiple connected sources (CNVD, Red Hat, NVD, CNNVD, ENISA EUVD, CVE/CVEList) confirm a boundary-ch...

PT-2026-31377

CVE-2025-50652 An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm usb.asp endpoint. https://t.co/4eH05VoBNA...

CVE-2025-45057

D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ippositionasp function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-50644

The CVE-2025-50644 affects D-Link DI-8003 (firmware 16.07.26A1). A buffer overflow arises from improper validation of input to the qj.asp endpoint, allowing a network-triggered crash. Public sources (CNVD-2026-17622, RH CVE, NVD/NVD-enriched entries) describe it as a denial-of-service vulnerabili...

D-Link DI-8300 安全漏洞

The D-Link DI-8300 is a wireless broadband router designed for small and medium-sized network environments by D-Link Corporation. The D-Link DI-8300 version 16.07.26A1 contains a security vulnerability. This vulnerability stems from a buffer overflow in the fx parameter of the jingxasp function,...

WordPress plugin Broken Link Checker SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2025-50650

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routesstatic parameter in the /router.asp endpoint...

CVE-2025-50664

The CVE-2025-50664 entry concerns a buffer overflow in D-Link DI-8003 (firmware 16.07.26A1) caused by improper handling of parameters in the /user_group.asp endpoint. An attacker can trigger it by sending a crafted HTTP GET with parameters name, mem, pri, and attr, potentially leading to denial o...

CVE-2025-50652

An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparmusb.asp endpoint...

CVE-2025-50667

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the iface parameter in the /wanlinedetection.asp endpoint...

CVE-2025-50661

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /urlrule.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, en, ips, u, time, act, rpri, and log...

CVE-2025-52222

D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rden, rdauth, rdacct, httphadmin,...