28587 matches found
ZBT WiFi Router Path Traversal
The vulnerability of the microprogrammed software of the WiFi router ZBT Shenzhen Zhibotong Electronics WE2001 is related to incorrect restrictions on the path name to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access and delete...
EUVD-2025-208317
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS...
CVE-2025-70232
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter...
Missing Release of Resource after Effective Lifetime
Overview Affected versions of this package are vulnerable to Missing Release of Resource after Effective Lifetime due to incomplete handling of the errors in TLS handshake. An attacker can cause the service to become unavailable by initiating multiple incomplete TLS handshakes, leading to resourc...
CVE-2026-26999 Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared befor...
CVE-2026-26999 Traefik: tcp router clears read deadlines before tls forwarding, enabling stalled handshakes (slowloris doS)
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared befor...
CVE-2025-70225
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig component...
CVE-2026-26999: Uncontrolled Resource Consumption
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared befor...
CVE-2025-29165
An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...
CVE-2025-29165
The D-Link DIR-1253 MESH wireless router (firmware version V1.6.1684 ) contains a vulnerability related to insecure privilege management . A flaw in the etc/shadow.sample component allows a malicious actor to escalate privileges remotely. To remediate this vulnerability, users are recommended to ...
CVE-2025-29165
An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...
CVE-2025-70229
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule...
PT-2026-23472
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow issue exists in D-Link DIR-513 version 1.10. The issue is related to the curTime parameter within the ''goform/formSetMACFilter'' endpoint. Providing a crafted input to this...
D-Link DIR-513 security vulnerabilities
The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability. This vulnerability stems from a stack buffer overflow in the curTime parameter of the goform/formSchedule function, which may allow for the execution of arbitrar...
CVE-2025-70230
A stack buffer overflow vulnerability exists in D-Link DIR-513 version 1.10 . The flaw is located in the goform/formSetDDNS function, specifically triggered by the curTime parameter. An attacker providing crafted input to this parameter can cause a stack buffer overflow, which may allow for the e...
CVE-2025-70231
The D-Link DIR-513 running firmware version 1.10 is susceptible to a critical path traversal vulnerability. The issue occurs because the system fails to adequately filter the FILECODE parameter when processing POST requests to the /goform/formLogin endpoint, which subsequently calls the /goform/g...
PT-2026-23470
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow issue exists in D-Link DIR-513 version 1.10. The issue is related to the curTime parameter within the ''/goform/formSetDDNS'' endpoint. Providing a crafted input to this parameter...
EUVD-2025-208289
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot...