PT-2025-43331

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G A1 version 1.0.2B05 Description A flaw exists in the SetWLanRadioSettings function that can lead to a Denial of Service DoS. This occurs due to a NULL pointer dereference triggered by a specially crafted HTTP request...

EUVD-2025-35579

D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-60331

The D-Link DIR-823G A1 wireless router, specifically version v1.0.2B05 , is vulnerable to a stack-based buffer overflow within the FillMacCloneMac parameter of the /EXCU_SHELL endpoint. The root cause is a failure to properly validate the length of the input data. A remote attacker can exploit th...

CVE-2025-52079

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp...

CVE-2025-52079

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp...

JLSEC-2025-186 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a...

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...

CVE-2025-52079

The D-Link DIR-820L wireless router (version 1.06B02 ) contains an Improper Access Control vulnerability within the ncc2 microprogramming software . The root cause is a failure to properly validate the authentication mechanism during the administrator password setup process. A malicious actor can...

D-Link DIR-852 HNAP1 File Command Injection Vulnerability

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from a command injection vulnerability that stems from the failure of file /HNAP1/ to properly filter...

D-Link DIR-816A2 Buffer Overflow Vulnerability

The D-Link DIR-816A2 is a router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-816A2 FWv1.10CNB05 version, which originates from the statuscheckpppoeuser parameter in the dirsetWanWifi function that fails to correctly validate the length and size of the input...

D-Link DIR-820L 安全漏洞

The D-Link DIR-820L is a wireless router device from D-Link. An improper access control vulnerability exists in the D-Link DIR-820L version 1.06B02, which stems from the administrator password setup function not properly validating the authentication mechanism. An attacker can exploit this...

CVE-2025-52079: Improper Access Control

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp...

PT-2025-45977

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to git index add can cause heap corruption that could be leveraged for arbitrary code execution. The...

CVE-2025-52079

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp...

EUVD-2025-35216

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp...

PT-2025-42929

Name of the Vulnerable Software and Affected Versions D-Link DIR-820L version 1.06B02 Description The administrator password setting has improper access control, allowing for unverified password changes via a crafted POST request to the /get set.ccp API endpoint. The request exploits a flaw in ho...

Argo Workflow has a Zipslip Vulnerability

Vulnerability Description Vulnerability Overview 1. During the artifact extraction process, the unpack function extracts the compressed file to a temporary directory /etc.tmpdir and then attempts to move its contents to /etc using the rename system call, 2. However, since /etc is an already...

The vulnerability of the soapcgi_main() function in the /soap.cgi script of the D-Link DIR-816L router’s software allows a hacker to execute arbitrary code.

The vulnerability of the soapcgimain function in the /soap.cgi script of the D-Link DIR-816L router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the service parameter. Exploiting this vulnerability allows an attacker operati...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software allows a hacker to execute arbitrary commands.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2025-33356

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...