CVE-2025-2215

A vulnerability classified as critical was found in Doufox up to 0.2.0. Affected by this vulnerability is an unknown functionality of the file /?s=doudou&c=file&a=list. The manipulation of the argument dir leads to path traversal. The attack can be launched remotely. The exploit has been disclose...

Malicious code in dir-size-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f803eeed1967e8ae2cd3095d6f293153fe8b5574bbef8aa2191c4b2f862658f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-10980

Name of the Vulnerable Software and Affected Versions: Doufox versions up to 0.2.0 Description: A critical issue was found in Doufox, affecting an unknown functionality of the file "/?s=doudou&c=file&a=list". The manipulation of the dir argument leads to path traversal. This issue can be exploite...

PT-2025-12719

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126/240802 Description A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the function sub 41710C of the file /goform/diag nslookup. The manipulation of the target add...

D-Link DIR-600 Multiple Vulnerabilities (2013 - 2024)

D-Link DIR-600 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-link DIR-823X Router DoS

The vulnerability of the FUN00412244 function in D-link DIR-823X router microprogramming software is related to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause service failure...

D-Link DIR-816 A2 Router Form2AddVrtsrv CGI Data Compromise

The vulnerability of the form2AddVrtsrv.cgi script of the Virtual Service Handler component in the D-Link DIR-816 A2 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected...

DDNS Service Data Compromise

The vulnerability of the DDNS service in the D-Link DIR-816 A2 router software lies in its lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

D-Link DIR-816 A2 Router form2Dhcpd.cgi Data Compromise

The vulnerability of the form2Dhcpd.cgi script within the DHCPD Setting Handler component of the D-Link DIR-816 A2 router’s microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protecte...

SUSE CVE-2022-49107

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephreaddir when notelastdentry returns error Reset the lastreaddir at the same time, and add a comment explaining why we don't free lastreaddir when diremit returns false...

SUSE CVE-2022-49127

In the Linux kernel, the following vulnerability has been resolved: reftracker: implement use-after-free detection Whenever reftrackerdirinit is called, mark the struct reftrackerdir as dead. Test the dead status from reftrackeralloc and reftrackerfree This should detect buggy devput/devhold...

DEBIAN-CVE-2022-49349

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4renamedirprepare We got issue as follows: EXT4-fs loop0: mounted filesystem without journal. Opts: ,errors=continue ext4getfirstdirblock: bh-bdata=0xffff88810bee6000 len=34478 ext4getfirstdirblock:...

DEBIAN-CVE-2022-49107

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in cephreaddir when notelastdentry returns error Reset the lastreaddir at the same time, and add a comment explaining why we don't free lastreaddir when diremit returns false...

D-Link DIR-823 Multiple Vulnerabilities (2025)

D-Link DIR-823 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-7918 · Gradle +1 · Gradle +1

Name of the Vulnerable Software and Affected Versions: net.rubygrapefruit:native-platform versions prior to 0.22-milestone-28 Gradle version 8.12 Description: The issue concerns a local privilege escalation vulnerability in the Gradle build automation tool, specifically in its native-platform...

D-Link DIR-816 Code Injection Vulnerability

The D-Link DIR-816 is a wireless router from China's AUO D-Link. A code injection vulnerability exists in the D-Link DIR-816 version 1.01TO, which stems from the fact that incorrect operation of the parameter SSID can lead to cross-site scripting attacks. The vulnerability can be exploited by an...

CVE-2024-57045

A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page...

CVE-2025-1392

A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html:menu=24gwlan:page=24Gbasic. The manipulation of the argument SSID leads to cross site scripting. T...

D-Link DIR-853 PSK Parameter Buffer Overflow Vulnerability

The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...

PT-2025-16977 · D Link · Dir 832

Name of the Vulnerable Software and Affected Versions: dlink DIR 832x version 240802 Description: The issue allows a remote attacker to execute arbitrary code via the target addr key value and the function 0x41737c. This enables the attacker to potentially gain control over the device...