D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially crafted GET request to the /urlmember.asp endpoint...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the name parameter. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by sending a...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the vlanname parameter. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure by sending ...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters “name” and “mem”. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a speciall...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router’s microprogramming software is related to buffer overflow in the stack when processing the customerror parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the /user.asp...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the name parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted GET request to the final destination...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the httplanport parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially...

WWBN AVideo has a CORS Origin Reflection Bypass via plugin/API/router.php and allowOrigin(true) Exposes Authenticated API Responses

Summary The CORS origin validation fix in commit 986e64aad is incomplete. Two separate code paths still reflect arbitrary Origin headers with credentials allowed for all /api/ endpoints: 1 plugin/API/router.php lines 4-8 unconditionally reflect any origin before application code runs, and 2...

CVE-2026-5842

A security vulnerability has been detected in decolua 9router up to 0.3.47. The impacted element is an unknown function of the file /api of the component Administrative API Endpoint. The manipulation leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-5981

A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32910)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the UploadOpenVpnCert function in the cstecgi.cgi file, which fails to properly handle the...

Tenda F456 stack buffer overflow vulnerability

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the formWrlsafeset function not properly handling the mitssid parameter. No detailed details about the vulnerability are currently available...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of parameters name, qq, and time. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a...

TOTOLink A3600R Router setAppEasyWizardConfig Heap Buffer Overflow DoS

The vulnerability of the setAppEasyWizardConfig function in the TOTOLink A3600R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary cod...

Wavlink WL-WN579A3 Router Command Execution

The vulnerability of the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data when processing the s parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending a specially crafted GET request to the /urlrule.asp endpoint...

D-Link DI-8003 Router Buffer Overflow DoS

The vulnerability of D-Link DI-8003 router microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the iface parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafte...

Totolink A7100RU Router setDdnsCfg Arbitrary Command Execution

The vulnerability of the setDdnsCfg function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the provider parameter. Exploiting this vulnerability allows a malicious actor to...

Totolink A7100RU Router SetScheduleCfg Command Execution

The vulnerability of the setScheduleCfg function /cgi-bin/cstecgi.cgi in the Totolink A7100RU router software lies in the lack of measures to neutralize special elements used in the operating system’s commands when processing the mode parameter. Exploiting this vulnerability allows a remote...