PT-2025-14113 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8100 version 16.07.26A1 Description: The issue concerns a buffer overflow in the ipsec net asp function, which can be exploited through the remot ip parameter. Recommendations: For D-LINK DI-8100 version 16.07.26A1, consider...

CVE-2025-25892

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-25894

The CVE-2025-25894 entry concerns a OS command injection in the D-Link DSL-3782 router (v1.01) exploitable via the samba_wg and samba_nbn parameters. The root cause is an ability to inject and execute OS commands through crafted packets, as described in multiple sources (e.g., NVD/Red Hat/CNVD). ...

CVE-2025-25896

The CVE-2025-25896 entry concerns a buffer overflow in D-Link DSL-3782 v1.01 triggered by the destination, netmask, and gateway parameters, allowing a crafted packet to cause a Denial of Service. Affected product: D-Link DSL-3782 (v1.01) with a vulnerability in these parameters; root cause is a b...

CVE-2025-25895

CVE-2025-25895 : The D-Link DSL-3782 router (v1.01) exposes an OS command injection vulnerability via the public_type parameter, allowing an attacker to craft a packet that executes arbitrary OS commands. Root cause: improper handling/validation of the public_type field in API endpoints. Impact i...

CVE-2025-25893

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

CVE-2025-25893

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

CVE-2025-25891

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-25891

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from Taiwan, China-based D-Link. The D-Link DSL-3782 suffers from an OS command injection vulnerability that originates in the sambawg and sambanbn parameters, which can be exploited by an attacker to execute arbitrary commands...

CVE-2025-25892

CVE-2025-25892 describes a buffer overflow in the D-Link DSL-3782 v1.01, exploitable via the sstartip, sendip, dstartip, and dendip parameters. The underlying issue allows an attacker to trigger a Denial of Service (DoS) by sending a crafted packet, as reported across multiple feeds. The availabl...

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from AUO. The D-Link DSL-3782 suffers from an OS command injection vulnerability that stems from the handling of the publictype parameter, which can be exploited by an attacker to submit a special request and execute arbitrary commands...

CVE-2025-25892

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-25895

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the publictype parameter. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

CVE-2025-25895

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the publictype parameter. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from Taiwan, China-based D-Link. The D-Link DSL-3782 suffers from an OS command injection vulnerability that originates from the inIP, insPort, inePort, exsPort, exePort, and protocol parameters, which can be exploited by an attacker to execute arbitrary...

CVE-2024-57045

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

CVE-2025-25893

The CVE-2025-25893 entry describes an OS command injection in D-Link DSL-3782 v1.01, triggered via crafted packets that manipulate inIP, insPort, inePort, exsPort, exePort, and protocol parameters. The impact is arbitrary OS command execution with high severity (CVSS v3.1: AV:A/AC:L/PR:L/UI:N/S:U...

PT-2025-14112 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8100 version 16.07.26A1 Description: The issue is related to a Buffer Overflow in the ipsec road asp function, which can be exploited via the host ip parameter. Recommendations: For D-LINK DI-8100 version 16.07.26A1, as a temporary...

CVE-2025-25891

CVE-2025-25891 affects D-Link DSL-3782 v1.01. The vulnerability is a buffer overflow in the destination, netmask, and gateway parameters that can be exploited to cause a Denial of Service via a crafted packet. CVSSv3.1 base score 5.7 (Medium), with adjacent access, low attack complexity, low priv...