PT-2025-36463

Name of the Vulnerable Software and Affected Versions: D-Link DIR-852 versions up to 1.00CN B09 Description: A vulnerability exists in D-Link DIR-852 that allows for information disclosure. The vulnerability is located in the phpcgi main function of the /getcfg.php file within the Device...

D-Link DIR-852 安全漏洞

The D-Link DIR-852 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-852 1.00CN B09 and prior versions, which originates from an information disclosure in the device configuration handler component...

CVE-2025-10093: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09. Affected by this vulnerability is the function phpcgimain of the file /getcfg.php of the component Device Configuration Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The explo...

CVE-2025-10034

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-10034

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-10034 D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-10034

D-Link DIR-825 1.08.01 is affected in the httpd component (ping6_response.cg) via get_ping6_app_stat; manipulating the ping6_ipaddr parameter triggers a buffer overflow. The flaw enables remote exploitation and is documented as already public. The vulnerability affects products no longer supporte...

CVE-2025-10034 D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-10034: Buffer Copy without Checking Size of Input

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

D-Link DIR-825 安全漏洞

D-Link DIR-825 is a dual-band wireless router for SMB and SOHO environments from AUO D-Link, supporting 2.4GHz and 5GHz bands at the same time to meet the demand for multi-device HD video transmission. The D-Link DIR-825 suffers from a buffer overflow vulnerability that originates from the...

Linux Distros Unpatched Vulnerability : CVE-2025-38710

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: Validate idepth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in direread, causing an undefined shift by 32 a...

OESA-2025-2153 netty security update

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers clients. %package help Summary: Documents for Buildarch: noarch Requires: man info Provides: -javadoc = - Obsoletes: -javadoc - %description help Man pages a...

DEBIAN-CVE-2025-38710

In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate idepth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in direread, causing an undefined shift by 32 at: index = hash 32 - dip-idepth; As calculated in an open-coded way in...

CVE-2025-38692

In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur if the following conditions occur due to file system corruption. 1 Condition for exfatcountdirentries to loop infinitely. - The cluster chain includes a loop....

CVE-2025-9752

A security vulnerability has been detected in D-Link DIR-852 1.00CN B09. Impacted is the function soapcgimain of the file soap.cgi of the component SOAP Service. Such manipulation of the argument service leads to os command injection. The attack can be launched remotely. The exploit has been...

The vulnerability of the FirmwareUpgrade function in D-Link DIR‑619L router microprogramming system allows a hacker to bypass the authentication process.

The vulnerability of the FirmwareUpgrade function in D-Link DIR‑619L router microprogramming software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures remotely...

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 allows attackers to execute malicious commands.

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 lies in the failure to eliminate special elements during the processing of the EVENT=CHECKFW parameter. Exploiting this vulnerability...

The vulnerability in the bsc_lan.php script of the D-Link DIR‑818LW router’s software allows a attacker to perform cross-site scripting (XSS) attacks.

The vulnerability in the bsclan.php script of the D-Link DIR‑818LW router’s microprogramming software relates to the lack of protection for the website structure when processing the Name parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...

CVE-2025-9727

A weakness has been identified in D-Link DIR-816L 206b01. Affected by this issue is the function soapcgimain of the file /soap.cgi. This manipulation of the argument service causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to the publ...

D-Link DIR-816L /soap.cgi file os command injection vulnerability

The D-Link DIR-816L is a dual-band wireless router that supports 2.4GHz and 5GHz bands with a maximum transfer rate of 450Mbps. The D-Link DIR-816L suffers from an os command injection vulnerability that stems from the parameter service in the file /soap.cgi failing to correctly filter constructe...