CVE-2025-7945 D-Link DIR-513 formSetWanDhcpplus buffer overflow

A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely...

CVE-2025-7945 D-Link DIR-513 formSetWanDhcpplus buffer overflow

A vulnerability was found in D-Link DIR-513 up to 20190831. It has been declared as critical. This vulnerability affects the function formSetWanDhcpplus of the file /goform/formSetWanDhcpplus. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely...

CVE-2025-7945

CVE-2025-7945 affects the D-Link DIR-513 up to 20190831. The vulnerability is a buffer overflow in the function formSetWanDhcpplus in the file /goform/formSetWanDhcpplus , triggered by manipulating the curTime argument. It can be exploited remotely and impacts devices that are no longer supported...

CVE-2025-7932

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-7932

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-7836

A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the function lxmldbcsystem of the file /htdocs/cgibin of the component Environment Variable Handler. The manipulation leads to command injection. The attack can be launche...

CVE-2025-7932 D-Link DIR‑817L ssdpcgi lxmldbc_system command injection

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-7932 D-Link DIR‑817L ssdpcgi lxmldbc_system command injection

A vulnerability classified as critical has been found in D-Link DIR‑817L up to 1.04B01. This affects the function lxmldbcsystem of the file ssdpcgi. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

CVE-2025-7932

D-Link DIR-817L is affected by a remote command-injection in the lxmldbc_system function of ssdpcgi, per multiple sources. Versions up to 1.04B01 are impacted. The vulnerability arises from improper filtering of constructed command characters. The exploit has been publicly disclosed. Several repo...

D-Link DI-8100 /jingx.asp File Buffer Overflow Vulnerability

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium-sized network environments, supporting up to 4 Internet ports and 4 LAN ports for up to 80 simultaneous users. The D-Link DI-8100 suffers from a buffer overflow vulnerability that originates from the failure of the...

D-Link DI-8100 /arp_sys.asp File Buffer Overflow Vulnerability

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium-sized network environments, supporting up to 4 Internet ports and 4 LAN ports for up to 80 simultaneous users. The D-Link DI-8100 suffers from a buffer overflow vulnerability that originates from the failure of the...

D-Link DSP-W110A1 Command Injection Vulnerability

The D-Link DSP-W110A1 is a Wi-Fi smart routing device. The D-Link DSP-W110A1 suffers from a command injection vulnerability that stems from incorrectly filtering input parameters, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

D-Link DIR-645 Command Injection Vulnerability

D-Link DIR-645 is a Gigabit wireless router for home and SMB users launched by D-Link in 2012. The D-Link DIR-645 suffers from a command injection vulnerability that stems from the failure of the file /htdocs/cgibin function ssdpcgimain in the component ssdpcgi to correctly filter constructed...

PT-2025-30933 · D Link · Dir-513

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 version 1.10 Description: A critical issue exists in the websAspInit function of the /goform/formSetWanPPPoE file. Manipulation of the curTime argument can lead to a buffer overflow. This issue can be exploited remotely. The...

PT-2025-30971 · D Link · D-Link Dir-513

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 versions up to 1.10 Description: A critical vulnerability exists in D-Link DIR-513. The issue is a stack-based buffer overflow within the formSetWanL2TPcallback function, located in the /goform/formSetWanL2TPtriggers file of th...

PT-2025-30317 · D Link · Dir-817

Name of the Vulnerable Software and Affected Versions: D-Link DIR‑817L versions up to 1.04B01 Description: A critical issue exists in D-Link DIR‑817L. The lxmldbc system function within the ssdpcgi file is susceptible to command injection, allowing for remote attacks. The exploit for this issue h...

CVE-2025-7911

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...

CVE-2025-7911

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...

CVE-2025-7911 D-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...

CVE-2025-7911 D-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...