10252 matches found
CVE-2025-7192 D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection
A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgimain of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2025-7192 D-Link DIR-645 ssdpcgi cgibin ssdpcgi_main command injection
A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgimain of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed ...
D-Link DIR-825 安全漏洞
The AUO DIR-605L is the first cloud router from AUO designed for home and small office networks. The AUO DIR-605L suffers from a buffer overflow vulnerability that originates from the failure of Language, a parameter of the function sub410DDC in the file switchlanguage.cgi in the httpd component,...
CVE-2025-7192: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in D-Link DIR-645 up to 1.05B01 and classified as critical. This issue affects the function ssdpcgimain of the file /htdocs/cgibin of the component ssdpcgi. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed ...
D-Link DIR-645 注入漏洞
D-Link DIR-645 is a Gigabit wireless router for home and SMB users launched by D-Link in 2012. The D-Link DIR-645 suffers from a command injection vulnerability that stems from the failure of the file /htdocs/cgibin function ssdpcgimain in the component ssdpcgi to correctly filter constructed...
D-Link DIR-619L Router DoS
The vulnerability of the formAutoDetecWANwizard4 function /goform/formAutoDetecWANwizard4 of the D-Link DIR-619L router’s microprogramming software is related to the copying of buffer contents without checking the size of input data during the processing of the curTime parameter. Exploiting this...
D-Link DIR-619L Router DoS
The vulnerability of the formSetWANTypeWizard5 function /goform/formSetWANTypeWizard5 of the D-Link DIR-619L router’s microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this...
PT-2025-39661
Name of the Vulnerable Software and Affected Versions DIR-823 firmware version 20250416 Description A remote code execution issue exists in the set cassword settings interface. The http casswd parameter does not properly filter the '&' character, allowing for the injection of reverse connection...
D-Link DIR-823-Pro Improper Privilege Control Vulnerability
D-Link DIR-823-Pro is a dual-band intelligent wireless router with quad-antenna design, supporting 802.11ac Gigabit Wi-Fi technology and wireless rate up to 1200Mbps, which can meet the high bandwidth demand for HD video playback, online games and so on. The D-Link DIR-823-Pro suffers from an...
D-Link DIR-820 Devices Command Injection (CVE-2023-25280)
OS Command injection vulnerability in D-Link DIR-820 allows attackers to escalate privileges to root via a crafted payload with the pingaddr parameter to ping.ccp. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
D-Link DIR-513 Buffer Overflow Vulnerability
D-Link DIR-513 is a wireless router product from China's AUO D-Link. The D-Link DIR-513 version 1.0 suffers from a buffer overflow vulnerability, which originates from the parameter curTime in the file /goform/formSetWanPPTP that fails to correctly validate the length and size of the input data,...
D-Link DIR-816 A2 Code Execution Vulnerability
The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2 suffers from a code execution vulnerability that originates from an unverified system function in the bin/goahead file, which can be exploited by an attacker to cause remote code execution...
DLink DIR-859 1.05 & 1.06B01 Path Traversal
The version of DLink installed on the remote host is prior to 1.07b03. It is, therefore, affected by a path traversal vulnerability as referenced in the vendor advisory. - A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown...
CVE-2025-6882
A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...
CVE-2025-45931
An issue D-Link DIR-816-A2 DIR-816A2FWv1.10CNB05R1B011D88210 allows a remote attacker to execute arbitrary code via system function in the bin/goahead file...
PT-2025-28805 · D Link · D-Link Dir-825
Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 2.10 Description: A critical vulnerability exists in the D-Link DIR-825 router. This issue affects the sub 410DDC function within the switch language.cgi file of the httpd component. Manipulation of the Language paramet...
D-Link DIR-619L Router DoS
The vulnerability of the formSetWizard1 function in the /goform/formWlSiteSurvey file of the D-Link DIR-619L router’s software is related to the issue where the operation’s output goes beyond the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow an...
D-Link DIR-619L Router Form Set ACL Filter DoS
The vulnerability of the formSetACLFilter function in the /goform/formSetACLFilter module of the D-Link DIR-619L router’s software is related to the issue where the operation’s output goes beyond the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow...
PT-2025-28663 · D Link · D-Link Dir-645
Name of the Vulnerable Software and Affected Versions: D-Link DIR-645 versions 1.05B01 and earlier Description: A critical issue affects the ssdpcgi main function of the ssdpcgi component, located in the /htdocs/cgibin file. This problem leads to command injection and can be exploited remotely. T...
