CVE-2025-50673

The CVE-2025-50673 vulnerability affects D-Link DI-8003 devices (firmware 16.07.26A1). It is caused by improper handling/boundary checking of the http_lanport parameter in the /webgl.asp endpoint, leading to a buffer overflow. Reported impact is a denial of service. The CVSSv3.1 vector indicates ...

CVE-2025-50671

CVE-2025-50671 describes a buffer overflow in D-Link DI-8003 firmware (16.07.26A1) caused by improper bounds checking in the /xwgl_ref.asp endpoint. An attacker can trigger by sending crafted HTTP GET requests with excessively long values for parameters such as name, en, user_id, shibie_name, tim...

PT-2026-31378

CVE-2025-50653 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time group.asp endpoint. https://t.co/22B1zw0ww8...

CVE-2025-50659

Affected product: D-Link DI-8003 (firmware 16.07.26A1). Vulnerability: a buffer overflow in /user.asp caused by improper handling of the custom_error parameter. Impact (per sources): availability impact high; authentication and confidentiality/integrity not affected. Attack vector: network, no us...

CVE-2025-50654

CVE-2025-50654 concerns the D-Link DI-8003 router. Connected sources confirm a buffer overflow vulnerability arising from improper validation of the id parameter in the /thd_member.asp endpoint. CNVD-2026-17634 states this can be exploited by an attacker to cause a denial of service. NVD data des...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006624)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006624 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: stmmac: fix altrtsepcs function when using a fixed-link When using a fixed-link, t...

CVE-2025-50646

The CVE-2025-50646 entry applies to the D-Link DI-8003 router (firmware 16.07.26A1). A buffer overflow is triggered by insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint, causing potential denial of service. The issue is documented across multiple feeds (CNVD, R...

PT-2026-31380

CVE-2025-50655 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thd group.asp endpoint. https://t.co/rBHkwRQKe2...

PT-2026-31398

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web post.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in parameters such as name, en, user id, log, and time...

PT-2026-31379

CVE-2025-50654 A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd member.asp endpoint. https://t.co/hq8MA3XXMp...

CVE-2025-50657

The CVE-2025-50657 entry concerns D-Link DI-8003 router firmware (16.07.26A1). The concrete issue is a buffer overflow caused by improper handling of the pid parameter in the /trace.asp endpoint. Descriptions across CNVD, RH, EUVD, NVD and CVE records consistently indicate this vulnerability can ...

PT-2026-31448

Name of the Vulnerable Software and Affected Versions D-Link DIR-645 versions 1.01 through 1.03 Description A stack-based buffer overflow exists in the hedwigcgi main function of the /cgi-bin/hedwig.cgi file. This issue can be exploited remotely. The exploit is publicly available. Recommendations...

CVE-2025-50650

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routesstatic parameter in the /router.asp endpoint...

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability that originates from improper handling of the pid parameter in the /trace.asp endpoint, which can be exploited by an attacker to cause a denial of service...

CVE-2025-50664

The CVE-2025-50664 entry concerns a buffer overflow in D-Link DI-8003 (firmware 16.07.26A1) caused by improper handling of parameters in the /user_group.asp endpoint. An attacker can trigger it by sending a crafted HTTP GET with parameters name, mem, pri, and attr, potentially leading to denial o...

WordPress plugin AnyTrack Affiliate Link Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

PT-2026-31405

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the http lanport parameter in the '/webgl.asp' API endpoint. Recommendations Update to a newer version that contains a fix for this vulnerabilit...

CVE-2025-50662

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...

CVE-2025-50655

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thdgroup.asp endpoint...

CVE-2025-50671

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglref.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with excessively long strings in parameters name, en, userid, shibiename, time,...