CVE-2025-6882

A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-6881

A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoebase.asp of the component jhttpd. The manipulation of the argument mschapen leads to buffer overflow. The attack may be launched remotely. Th...

CVE-2025-6881

A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoebase.asp of the component jhttpd. The manipulation of the argument mschapen leads to buffer overflow. The attack may be launched remotely. Th...

CVE-2025-6882 D-Link DIR-513 formSetWanPPTP buffer overflow

A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-6882

Affects D-Link DIR-513 v1.0. The vulnerability resides in the /goform/formSetWanPPTP endpoint where manipulation of the curTime parameter can cause a buffer overflow, enabling remote exploitation. Several sources confirm this is a critical, network-attackable issue with potential arbitrary code e...

CVE-2025-6882 D-Link DIR-513 formSetWanPPTP buffer overflow

A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-6881 D-Link DI-8100 jhttpd pppoe_base.asp buffer overflow

A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoebase.asp of the component jhttpd. The manipulation of the argument mschapen leads to buffer overflow. The attack may be launched remotely. Th...

CVE-2025-6881

The CVE-2025-6881 entry concerns D-Link DI-8100 firmware version 16.07.21. A vulnerability exists in the jhttpd component, specifically in the /pppoe_base.asp file where the mschap_en argument is not properly validated, causing a buffer overflow. This can be triggered remotely and has been public...

CVE-2025-6881 D-Link DI-8100 jhttpd pppoe_base.asp buffer overflow

A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoebase.asp of the component jhttpd. The manipulation of the argument mschapen leads to buffer overflow. The attack may be launched remotely. Th...

D-Link DI-7300G+ 安全漏洞

The D-Link DI-7300G+ is a ruggedized, enterprise-grade smart gateway from China-based AUO D-Link. A security vulnerability exists in D-Link DI-7300G+ version 19.12.25A1 and DI-8200G version 17.12.20A1, which originates from os command injection due to incorrect operation of the parameters flag, c...

D-Link DCS-7517 安全漏洞

D-Link DCS-7517 is a network camera from China AUO D-Link. A trust management issue vulnerability exists in the D-Link DCS-7517 version 2.02.0 and earlier, which stems from the use of hard-coded passwords. An attacker could exploit the vulnerability to cause confidentiality to be compromised...

PT-2025-27483 · D Link · D-Link Dcs-7517

Name of the Vulnerable Software and Affected Versions: D-Link DCS-7517 versions up to 2.02.0 Description: A vulnerability was found in the Qlync Password Generation Handler component, affecting the function g F n GenPassForQlync of the file /bin/httpd. The manipulation leads to the use of...

D-Link Multiple DNS NAS Devices Multiple Vulnerabilities (2024 - 2025)

Multiple D-Link DNS devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-45931

An issue in D-Link DIR-816-A2 (DIR-816A2_FWv1.10CNB05_R1B011D88210) allows remote code execution via the system() function in bin/goahead, caused by unverified/system() usage. Impact is remote arbitrary code execution on affected devices. Exploitation status is not detailed in the provided connec...

CVE-2025-45931

An issue D-Link DIR-816-A2 DIR-816A2FWv1.10CNB05R1B011D88210 allows a remote attacker to execute arbitrary code via system function in the bin/goahead file...

CVE-2025-45931

An issue D-Link DIR-816-A2 DIR-816A2FWv1.10CNB05R1B011D88210 allows a remote attacker to execute arbitrary code via system function in the bin/goahead file...

PT-2025-27421 · D Link · D-Link Di-7300G+

Name of the Vulnerable Software and Affected Versions: D-Link DI-7300G+ version 19.12.25A1 Description: A critical issue was found in the httpd debug.asp file, where the manipulation of the Time argument leads to os command injection. The exploit has been disclosed to the public and may be used...

D-Link DI-7300G+ 命令注入漏洞

D-Link DI-7300G+ is a ruggedized enterprise-grade smart gateway from China AUO D-Link. A command injection vulnerability exists in the D-Link DI-7300G+ version 19.12.25A1, which stems from the incorrect operation of the parameters proxysrv, proxylanport, proxylanip, and proxysrvport in the file...

PT-2025-27456 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816-A2 version DIR-816A2 FWv1.10CNB05 R1B011D88210 Description: An issue in the D-Link DIR-816-A2 allows a remote attacker to execute arbitrary code via the system function in the bin/goahead file. This enables the attacker to run...

D-Link DWR Device Detection Consolidation

Consolidation of D-Link DWR Router devices detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescripti...