TOTOLINK A702r 安全漏洞

The TOTOLINK A702r is a router device from China's Gion Electronics TOTOLINK. The TOTOLINK A702r version 4.0.0-B20230721.1521 suffers from a buffer overflow vulnerability, which originates from the parameter submit-url in the file /boafrm/formParentControl that fails to validate the length and si...

CVE-2025-50404

Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array...

Intelbras RX1500 Router 安全漏洞

Intelbras RX1500 Router is a router from Intelbras, Brazil. A security vulnerability exists in Intelbras RX1500 Router v2.2.17 and earlier versions, which stems from an integer overflow in the websReadEvent function when processing http headers, which may result in an array out-of-bounds...

Asrmicro ASR Series 安全漏洞

Asrmicro ASR Series is a series of chips from China's Avantage Technology Asrmicro. A security vulnerability exists in Asrmicro ASR Series, which originates from a resource leak in the sms.c file in router...

CVE-2025-6916

A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. This affects the function FormLogin of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack needs to be initiated within the local...

CVE-2025-6897

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpddebug.asp. The manipulation of the argument Time leads to os command injection. The exploit has been disclosed to the public and may be used...

D-Link DIR-619L Buffer Overflow Vulnerability (CNVD-2025-17356)

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the parameter curTime in the fi...

D-Link DIR-619L /formAutoDetecWAN_wizard4 File Stack Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China-based AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-619L /formAutoDetecWANwizard4 file due to incorrect boundary checking in the function formAutoDetecWANwizard4 of the file /goform/formAutoDetecWANwizard4 caused. An...

CVE-2025-34049 OptiLink ONT1GEW GPON Remote Code Execution

An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11X101 Build 1127.190306 and earlier. The router’s web management interface fails to properly sanitize user input in the targetaddr parameter of the formTracert and formPing administrative...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a stack buffer overflow vulnerability caused by incorrect boundary checking in function formSetWANTypeWizard5 in file /goform/formSetWANTypeWizard5. An attacker could exploit this vulnerability to...

CVE-2025-6560 Sapido Wireless Router - Exposure of Sensitive Information

Multiple wireless router models from Sapido have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials. The affected models are out of support; replacing the devic...

CVE-2025-34037

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcpip parameter without sanitization, allowing...

Elecom WRC-1167GHBK2-S 跨站脚本漏洞

The Elecom WRC-1167GHBK2-S is a router from Elecom Japan. The Elecom WRC-1167GHBK2-S suffers from a cross-site scripting vulnerability that stems from susceptibility to stored cross-site scripting attacks...

CVE-2025-6373

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the function formSetWizard1 of the file /goform/formWlSiteSurvey. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be initiated remotely. T...

TOTOLINK N300RH 安全漏洞

TOTOLINK N300RH is a long-range wireless router from China's TOTOLINK, supporting the IEEE 802.11n standard with a maximum wireless transmission rate of 300Mbps. A denial of service vulnerability exists in the TOTOLINK N300RH, which originates from the incorrect operation of the parameter url in...

CVE-2025-6372

CVE-2025-6372 affects D-Link DIR-619L (firmware 2.06B01). The vulnerability is in the function formSetWizard1 of the file /goform/formSetWizard1 , where manipulating the argument curTime causes a stack-based buffer overflow. This can be exploited remotely and may allow arbitrary code execution in...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A stack overflow vulnerability exists in the D-Link DIR-619L /goform/formSetEnableWizard, which originates from...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A stack overflow vulnerability exists in the D-Link DIR-619L /goform/formSetDomainFilter, which originates from...

The vulnerability of the built-in boa server (/boafrm/formNtp) of TOTOLINK EX1200T router microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in boa server /boafrm/formNtp of the TOTOLINK EX1200T router’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to...

TOTOLINK A702r 安全漏洞

The TOTOLINK A702r is a router device from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK A702r version 4.0.0-B20230721.1521, which originates from the failure of the submit-url parameter in the /boafrm/formSysLog file to correctly validate the length of...