CVE-2025-70230

A stack buffer overflow vulnerability exists in D-Link DIR-513 version 1.10 . The flaw is located in the goform/formSetDDNS function, specifically triggered by the curTime parameter. An attacker providing crafted input to this parameter can cause a stack buffer overflow, which may allow for the e...

CVE-2025-70231

The D-Link DIR-513 running firmware version 1.10 is susceptible to a critical path traversal vulnerability. The issue occurs because the system fails to adequately filter the FILECODE parameter when processing POST requests to the /goform/formLogin endpoint, which subsequently calls the /goform/g...

CVE-2025-29165

An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...

CVE-2025-70229

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule...

D-Link DIR-513 security vulnerabilities

The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability. This vulnerability stems from a stack buffer overflow in the curTime parameter of the goform/formSchedule function, which may allow for the execution of arbitrar...

PT-2026-23472

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow issue exists in D-Link DIR-513 version 1.10. The issue is related to the curTime parameter within the ''goform/formSetMACFilter'' endpoint. Providing a crafted input to this...

CVE-2026-26999: Uncontrolled Resource Consumption

Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared befor...

CVE-2025-29165

The D-Link DIR-1253 MESH wireless router (firmware version V1.6.1684 ) contains a vulnerability related to insecure privilege management . A flaw in the etc/shadow.sample component allows a malicious actor to escalate privileges remotely. To remediate this vulnerability, users are recommended to ...

PT-2026-23470

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow issue exists in D-Link DIR-513 version 1.10. The issue is related to the curTime parameter within the ''/goform/formSetDDNS'' endpoint. Providing a crafted input to this parameter...

CVE-2025-29165

An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...

EUVD-2025-208289

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot...

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

CVE-2025-70219

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot...

GHSA-XW98-5Q62-JX94 Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (Slowloris DOS)

Impact There is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared before the TLS handshake is completed. When a TLS handshake read error occurs, the code...

CVE-2025-70223

A stack buffer overflow vulnerability exists in D-Link DIR-513 v1.10 . The flaw is triggered by providing a crafted value to the curTime parameter within the goform/formAdvNetwork API endpoint. This memory corruption issue could potentially lead to a system compromise . To remediate this, users s...

D-link DIR-823X Sub Process Command Execution

The vulnerability of the sub420618 function in the /goform/setupnp function of the D-link DIR-823X microprogramming router software is related to the failure to take measures to neutralize special elements during the processing of the upnpenable parameter. Exploiting this vulnerability allows a...

Tenda RX3 set_device_name MAC Filtering Configuration DoS

The vulnerability of the setdevicename function /goform/setBlackRule of the MAC Filtering Configuration Endpoint component in the Tenda RX3 microprogramming router software lies in the copying of buffer data without checking the size of the input data during the processing of the devName/mac...

Tenda W20E sprintf Heap Buffer Overflow DoS

The vulnerability of the sprintf function goform/formDelWewifiPic in the microprogramming software for Tenda W20E routers stems from the operation that goes beyond the buffer boundaries in memory when processing the picName parameter. Exploiting this vulnerability can allow an attacker to cause...

D-Link DIR-615 Router Code Execution

The vulnerability of the advrouting.php implementation of the Web Configuration Interface component of the D-Link DIR-615 router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command when processing the...

D-Link DI-7100G Router Command Execution

The vulnerability of the setjhttpdinfo function in D-Link DI-7100G C1 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the usbusername parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...