10250 matches found
PT-2025-45977
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to git index add can cause heap corruption that could be leveraged for arbitrary code execution. The...
D-Link DIR-820L 安全漏洞
The D-Link DIR-820L is a wireless router device from D-Link. An improper access control vulnerability exists in the D-Link DIR-820L version 1.06B02, which stems from the administrator password setup function not properly validating the authentication mechanism. An attacker can exploit this...
EUVD-2025-35216
The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp...
CVE-2025-52079
The D-Link DIR-820L wireless router (version 1.06B02 ) contains an Improper Access Control vulnerability within the ncc2 microprogramming software . The root cause is a failure to properly validate the authentication mechanism during the administrator password setup process. A malicious actor can...
PT-2025-42929
Name of the Vulnerable Software and Affected Versions D-Link DIR-820L version 1.06B02 Description The administrator password setting has improper access control, allowing for unverified password changes via a crafted POST request to the /get set.ccp API endpoint. The request exploits a flaw in ho...
Argo Workflow has a Zipslip Vulnerability
Vulnerability Description Vulnerability Overview 1. During the artifact extraction process, the unpack function extracts the compressed file to a temporary directory /etc.tmpdir and then attempts to move its contents to /etc using the rename system call, 2. However, since /etc is an already...
The vulnerability of the soapcgi_main() function in the /soap.cgi script of the D-Link DIR-816L router’s software allows a hacker to execute arbitrary code.
The vulnerability of the soapcgimain function in the /soap.cgi script of the D-Link DIR-816L router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the service parameter. Exploiting this vulnerability allows an attacker operati...
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software allows a hacker to execute arbitrary commands.
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2025-61577
D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2025-33356
D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-61577
D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2025-41393
Name of the Vulnerable Software and Affected Versions D-Link DIR-816A2 version FWv1.10CNB05 Description The D-Link DIR-816A2 firmware version FWv1.10CNB05 contains a stack overflow issue. This occurs through the statuscheckpppoeuser parameter within the dir setWanWifi function. A crafted input to...
CVE-2025-61577
The D-Link DIR-816A2 router, specifically running firmware version FWv1.10CNB05 , is vulnerable to a stack-based buffer overflow . The root cause is the dir_setWanWifi function's failure to properly validate the length and size of input data provided via the statuscheckpppoeuser parameter. An att...
D-Link DIR-816A2 安全漏洞
The D-Link DIR-816A2 is a router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-816A2 FWv1.10CNB05 version, which originates from the statuscheckpppoeuser parameter in the dirsetWanWifi function that fails to correctly validate the length and size of the input...
CVE-2025-61577: Stack-based Buffer Overflow
D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-61577
D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
VulnCheck KEV: CVE-2022-37129
D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...
VulnCheck KEV: CVE-2018-10957
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2025-11488
A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...
CVE-2025-11488 D-Link DIR-852 HNAP1 command injection
A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...