Lucene search
+L

12 matches found

Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•31 views

PT-2026-37216

Name of the Vulnerable Software and Affected Versions D-Link DI-8100 version 16.07.26A1 Description A buffer overflow occurs in the HTTP Request Handler component when manipulating the Name argument. This issue is located within the tggl asp function of the '/tggl.asp' endpoint and can be trigger...

9CVSS7.4AI score0.01187EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
•added 2026/04/15 12:00 a.m.•14 views

The vulnerability of D-Link DI-8003 router microprogramming software, related to buffer overflow in the stack, allows a hacker to trigger a service failure.

The vulnerability of D-Link DI-8003 router microprogramming software is related to buffer overflow in the stack when processing the PID parameter. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted GET request to the /trace.asp endpoin...

7.8CVSS6.1AI score0.00516EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2026/04/10 7:22 p.m.•17 views

CVE-2025-50647

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint...

7.5CVSS6AI score0.00516EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/04/10 7:22 p.m.•15 views

CVE-2025-50648

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint...

7.5CVSS6AI score0.00516EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/08 7:24 p.m.•20 views

CVE-2025-50673

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the httplanport parameter in the /webgl.asp endpoint...

7.5CVSS0.00408EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 7:24 p.m.•15 views

CVE-2025-50647

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint...

7.5CVSS0.00516EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•16 views

PT-2026-31381

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the pid parameter in the /trace.asp endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability. As a tempora...

7.8CVSS7.4AI score0.00516EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/04/08 12:00 a.m.•38 views

CVE-2025-50650

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routesstatic parameter in the /router.asp endpoint...

0.00516EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•17 views

PT-2026-31382

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the custom error parameter in the /user.asp endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability...

7.8CVSS7.4AI score0.00516EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•15 views

PT-2026-31372

Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to inadequate input validation on the name parameter within the '/qos type asp.asp' API endpoint. Recommendations Ensure proper input validation is implemented for the...

7.8CVSS7.4AI score0.00516EPSS
SaveExploits0References7
VulnCheck KEV
VulnCheck KEV
•added 2026/03/11 12:00 a.m.•34 views

VulnCheck KEV: CVE-2023-24796

Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /goform/sysTools and /adm/systools.asp endpoints...

9.8CVSS8.6AI score0.01573EPSS
SaveIn wildExploits0References2
RedhatCVE
RedhatCVE
•added 2025/11/18 3:05 a.m.•35 views

CVE-2025-10460

A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...

9.4CVSS8.2AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder