CVE-2025-70218

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via POST to the goform/formAdvFirewall component...

CVE-2025-70220

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWANwizard4...

PT-2026-23034

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. This issue is triggered by providing a crafted value to the curTime parameter within the ''goform/formAdvNetwork'' API endpoint. T...

D-link DIR-823X Configuration Handler Sub_4208A0 Arbitrary Command Execution

The vulnerability of the sub4208A0 /goform/setdmz function in the Configuration Handler component of the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements during the processing of the dmzhost/dmzenable parameter. Exploiting th...

D-link DIR-823X Sub Process Arbitrary Command Execution

The vulnerability of the sub420688 /goform/setqos function in D-link DIR-823X router microprogramming software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially craft...

D-link DIR-823X Sub Process Command Execution

The vulnerability of the sub420618 function in the /goform/setupnp function of the D-link DIR-823X microprogramming router software is related to the failure to take measures to neutralize special elements during the processing of the upnpenable parameter. Exploiting this vulnerability allows a...

Tenda RX3 Router DoS

The vulnerability of the /goform/openSchedWifi file in the microprogramming software for Tenda RX3 routers stems from the copying of buffers without checking the size of the input data during the processing of the schedStartTime/schedEndTime parameters. Exploiting this vulnerability could allow a...

Tenda W20E getMibPrefix function DoS

The vulnerability of the getMibPrefix function goform/formWifiFilterRulesAdd in the Tenda W20E router microprogramming software is related to the operation going beyond the buffer in memory when processing the nptr parameter. Exploiting this vulnerability could allow a remote attacker to cause...

D-Link DIR-615 Router Code Execution

The vulnerability of the advrouting.php implementation of the Web Configuration Interface component of the D-Link DIR-615 router microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s command when processing the...

Tenda W20E Router Arbitrary Command Execution

The vulnerability of the addWewifiWhiteUser function in the goform/formAddWewifiWhiteUser function of the Tenda W20E router’s microprogramming software is related to the execution of operations outside the buffer in the userInfo parameter’s memory. Exploiting this vulnerability could allow a remo...

D-Link DI-7100G Router Command Execution

The vulnerability of the setjhttpdinfo function in D-Link DI-7100G C1 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the usbusername parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

D-Link DIR-615 Router adv_firewall.php Code Execution

The vulnerability of the advfirewall.php implementation of the DMZ Host Feature component of the D-Link DIR-615 router microsystem lies in the failure to eliminate special elements used in the operating system’s command when processing the dmzipaddr parameter. Exploiting this vulnerability allows...

Tenda TX3 Router SetIpMacBind Data Compromise

The vulnerability of the goform/SetIpMacBind function in the Tenda TX3 router microprogramming system lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibili...

Tenda W20E Arbitrary Command Execution

The vulnerability of the pPortMapIndex function implemented in goform/formDelPortMapping of the Tenda W20E router software is related to the execution of operations outside the buffer in the parameter strcpy area of memory. Exploiting this vulnerability allows a remote attacker to execute arbitra...

Tenda RX3 set_device_name MAC Filtering Configuration DoS

The vulnerability of the setdevicename function /goform/setBlackRule of the MAC Filtering Configuration Endpoint component in the Tenda RX3 microprogramming router software lies in the copying of buffer data without checking the size of the input data during the processing of the devName/mac...

Pix-Link LV-WR21Q Function Unauthenticated Access

The vulnerability of the /goform/getHomePageInfo function in the microprogramming software for Pix-Link LV-WR21Q routers is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Tenda W20E doSystemCmd Command Execution

The vulnerability of the doSystemCmd goform/formSetUSBPartitionUmount function in the Tenda W20E router microprogramming system is related to incorrect handling of code generation in memory when processing the usbPartitionName parameter. Exploiting this vulnerability allows an attacker to execute...

PT-2026-23061

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. This issue is triggered by providing a crafted value to the curTime parameter within the ''/goform/formLogin'' API endpoint. The...

PT-2026-23084

Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.38 and versions prior to 3.6.9 Description Traefik, an HTTP reverse proxy and load balancer, has an issue in its handling of TLS handshakes on TCP routers. The read deadline used for protocol sniffing is cleared...

Tenda W20E sprintf Heap Buffer Overflow DoS

The vulnerability of the sprintf function goform/formDelWewifiPic in the microprogramming software for Tenda W20E routers stems from the operation that goes beyond the buffer boundaries in memory when processing the picName parameter. Exploiting this vulnerability can allow an attacker to cause...