CVE-2025-25896

The CVE-2025-25896 entry concerns a buffer overflow in D-Link DSL-3782 v1.01 triggered by the destination, netmask, and gateway parameters, allowing a crafted packet to cause a Denial of Service. Affected product: D-Link DSL-3782 (v1.01) with a vulnerability in these parameters; root cause is a b...

CVE-2025-25891

A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-25894

The CVE-2025-25894 entry concerns a OS command injection in the D-Link DSL-3782 router (v1.01) exploitable via the samba_wg and samba_nbn parameters. The root cause is an ability to inject and execute OS commands through crafted packets, as described in multiple sources (e.g., NVD/Red Hat/CNVD). ...

CVE-2025-25895

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the publictype parameter. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

CVE-2025-25891

CVE-2025-25891 affects D-Link DSL-3782 v1.01. The vulnerability is a buffer overflow in the destination, netmask, and gateway parameters that can be exploited to cause a Denial of Service via a crafted packet. CVSSv3.1 base score 5.7 (Medium), with adjacent access, low attack complexity, low priv...

CVE-2024-57045

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from Taiwan, China-based D-Link. The D-Link DSL-3782 suffers from an OS command injection vulnerability that originates from the inIP, insPort, inePort, exsPort, exePort, and protocol parameters, which can be exploited by an attacker to execute arbitrary...

PT-2025-14112 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8100 version 16.07.26A1 Description: The issue is related to a Buffer Overflow in the ipsec road asp function, which can be exploited via the host ip parameter. Recommendations: For D-LINK DI-8100 version 16.07.26A1, as a temporary...

CVE-2025-25895

An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the publictype parameter. This vulnerability allows attackers to execute arbitrary operating system OS commands via a crafted packet...

CVE-2025-25893

The CVE-2025-25893 entry describes an OS command injection in D-Link DSL-3782 v1.01, triggered via crafted packets that manipulate inIP, insPort, inePort, exsPort, exePort, and protocol parameters. The impact is arbitrary OS command execution with high severity (CVSS v3.1: AV:A/AC:L/PR:L/UI:N/S:U...

CVE-2025-1392

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

CVE-2025-1392

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

CVE-2025-1392 D-Link DIR-816 index.html cross site scripting

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

CVE-2025-1392 D-Link DIR-816 index.html cross site scripting

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...

CVE-2025-1392

The CVE-2025-1392 entry applies to D-Link DIR-816 (firmware 1.01TO). The vulnerability is an XSS flaw in handling the SSID parameter via /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G_basic, which can be triggered remotely. Multiple connected sources confirm the issue is t...

D-Link DIR-853 SetSysEmailSettings Module Buffer Overflow Vulnerability

The D-Link DIR-853 is a router from China's AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the AccountPassword parameter in the SetSysEmailSettings module not properly handling user input. No details of the vulnerability are provided at this time...

D-Link DIR-816 代码注入漏洞

The D-Link DIR-816 is a wireless router from China's AUO D-Link. A code injection vulnerability exists in the D-Link DIR-816 version 1.01TO, which stems from the fact that incorrect operation of the parameter SSID can lead to cross-site scripting attacks. The vulnerability can be exploited by an...

D-Link DIR-853 SetDynamicDNSSettings Module Buffer Overflow Vulnerability

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetDynamicDNSSettings module not properly handling user input. No details of the vulnerability are provided at this time...

D-Link DIR-853 SetVirtualServerSettings Module Command Injection Vulnerability

The D-Link DIR-853 is a router from China's AUO D-Link. The D-Link DIR-853 suffers from a command injection vulnerability that stems from the SetVirtualServerSettings module not properly handling user input. No details of the vulnerability are provided at this time...

D-Link DIR-853 SetIPv6PppoeSettings Module Buffer Overflow Vulnerability

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the IPv6PppoePassword parameter in the SetIPv6PppoeSettings module not properly handling user input. No detailed vulnerability details are provided at this...