CVE-2024-10914-EXPLOIT

CVE-2024-10914 - D-Link Remote Code Execution RCE This repo contains a proof-of-concept PoC exploit for a critical vulnerability affecting D-Link NAS devices. The bug, tracked as CVE-2024-10914 , impacts the following models: D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325 D-Link DNS-340L The...

D-Link R95 Router Code Execution

The vulnerability of the /bin/ssi file of the DHMAPI component in D-Link R95 router microprogramming software is related to the lack of measures taken to neutralize special elements in the NTPServer parameters. Exploiting this vulnerability allows a remote attacker to execute arbitrary code,...

D-Link DIR-895L L2TP Host Name AVP OOB Write (CVE-2026-100740)

Out-of-bounds one-byte NUL write in the L2TP control parser on D-Link DIR-895L firmware A1102b07 when the Host Name AVP length is 127 peerhostname128. Requires L2TP WAN role / exposed UDP 1701. Set confirm=true to send the crafted SCCRQ trigger on authorized lab targets only. !/usr/bin/env python...

D-Link DIR-895L CVE-2026-100740 L2TP OOB Write Detection

Detects D-Link DIR-895L firmware A1102b07 and an exposed L2TP UDP/1701 service associated with CVE-2026-100740 Host Name AVP out-of-bounds write. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-100740 — D-Link DIR-895L L2TP Host Name AVP OOB write detection.""" from future import annotation...

CVE-2026-101081

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081 D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081 D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081

The D-Link DI-8400 running firmware version 16.07 is vulnerable to a stack-based buffer overflow in the Web Administration Service . The flaw exists within the menu_nat_more_asp function of the menu_nat_more.asp file, where manipulating the opt argument can trigger the overflow. This vulnerabilit...

EUVD-2026-88345

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

Exploit for CVE-2026-93958

CVE-2026-93958 — D-Link R95 BE9500 DHMAPI / NTPServer Pytho...

PT-2026-99926

Name of the Vulnerable Software and Affected Versions D-Link DI-8400 version 16.07 Description A flaw in the Web Administration Service allows for a remote stack-based buffer overflow. This occurs when the opt argument is manipulated within the menu nat more asp function of the menu nat more.asp...

CVE-2026-101081: Stack-based Buffer Overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

DCS932L-Emulation-CVE-2024-37606-Attack

エミュレーションを再び簡単に ようこそ！このリポジトリは、D-Link DCS-932L ファームウェアをエミュレートし、CVE-2024-37606 の脆弱性を実証するためのツールと環境を提供します。パッチ適用済みのバイナリと必要なライブラリが含まれており、Ghidra などのツールを使った手動パッチ適用を必要とせず、エミュレーションのセットアップを簡略化します。 CVE-2024-37606 このプロジェクトには、CVE-2024-37606 の概念実証エクスプロイト CVE-2024-37606-DCS932L.py が含まれています。この脆弱性は、alphapd...

Exploit for CVE-2026-100740

CVE-2026-100740 — D-Link DIR-895L L2TP OOB Write Python 3 PoC...

CVE-2026-100740

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

CVE-2026-100740 D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

CVE-2026-100740

The D-Link DIR-895L router, running firmware A1_102b07 , contains an out-of-bounds write (CWE-787 / CWE-119) vulnerability in the L2TP Control Channel Parser within the tunnel.c file. Specifically, the tunnel_set_params() function fails to properly handle the Host Name AVP ; while the length is c...

CVE-2026-100740 D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

EUVD-2026-87816

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...

CVE-2026-100740: Out-of-bounds Write

A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...