CVE-2025-2191

The CVE-2025-2191 entry concerns Claro A7600-A1 Ping6 Diagnóstico, specifically the file /form2pingv6.cgi. The vulnerability is an input manipulation of the ip6addr parameter (example payload ) that leads to cross-site scripting. Public exploit information exists, and the attack surface is remote...

CVE-2025-2191 Claro A7600-A1 Ping6 Diagnóstico form2pingv6.cgi cross site scripting

A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16v2110403CLA32160817. Affected by this issue is some unknown functionality of the file /form2pingv6.cgi of the component Ping6 Diagnóstico. The manipulation of the argument ip6addr with the input...

CVE-2025-2191 Claro A7600-A1 Ping6 Diagnóstico form2pingv6.cgi cross site scripting

A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16v2110403CLA32160817. Affected by this issue is some unknown functionality of the file /form2pingv6.cgi of the component Ping6 Diagnóstico. The manipulation of the argument ip6addr with the input...

PT-2025-10727

Name of the Vulnerable Software and Affected Versions RUGGEDCOM RM1224 LTE4G EU versions V8.2.1 RUGGEDCOM RM1224 LTE4G NAM versions V8.2.1 SCALANCE M804PB versions V8.2.1 SCALANCE M812-1 ADSL-Router family versions V8.2.1 SCALANCE M816-1 ADSL-Router family versions V8.2.1 SCALANCE M826-2...

Claro A7600-A1 has a code injection vulnerability

The Claro A7600-A1 is a wireless router from Claro. A code injection vulnerability exists in the Claro A7600-A1 RNR4-A72T-2x16v2110403CLA32160817 version, which originates from cross-site scripting and could lead to remote attacks...

PT-2025-10748

Name of the Vulnerable Software and Affected Versions Claro A7600-A1 RNR4-A72T-2x16 v2110403 CLA 32 160817 Description A problem has been found in the Ping6 Diagnóstico component, specifically in the /form2pingv6.cgi file. The issue affects some unknown functionality of this file. The manipulatio...

CVE-2025-2191: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Claro A7600-A1 RNR4-A72T-2x16v2110403CLA32160817. Affected by this issue is some unknown functionality of the file /form2pingv6.cgi of the component Ping6 Diagnóstico. The manipulation of the argument ip6addr with the input...

CVE-2025-1877: NULL Pointer Dereference

A vulnerability, which was classified as critical, was found in D-Link DAP-1562 1.10. This affects the function pureauthcheck of the component HTTP POST Request Handler. The manipulation of the argument a1 leads to null pointer dereference. It is possible to initiate the attack remotely. The...

D-Link DIR-853 A1 Router DoS

The vulnerability in the prog.cgi script of the SetQuickVPNSettings module of the D-Link DIR-853 A1 router operating system is related to buffer overflow during the processing of the PSK parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

CVE-2025-25745: Stack-based Buffer Overflow

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

CVE-2025-25740: Stack-based Buffer Overflow

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the PSK parameter in the SetQuickVPNSettings module...

CVE-2025-25741

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module...

CVE-2025-25746

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...

CVE-2025-25746: Out-of-bounds Write

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...

CVE-2025-25746

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...

CVE-2025-25744: Out-of-bounds Write

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module...

CVE-2025-25743: Improper Neutralization of Special Elements used in a Command

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a command injection vulnerability in the SetVirtualServerSettings module...

CVE-2025-25741: Stack-based Buffer Overflow

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module...

CVE-2025-25742: Out-of-bounds Write

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module...