9853 matches found
D-Link DIR-513 goform/formSetDomainFilter File Buffer Overflow Vulnerability
D-Link DIR-513 is a wireless router product from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-513 goform/formSetDomainFilter file, which originates from the parameter curTime in the goform/formSetDomainFilter file that fails to correctly validate the length of the...
CVE-2025-70250
The D-Link DIR-513 wireless router (firmware version 1.10 ) is susceptible to a stack buffer overflow vulnerability. This issue is triggered when the curTime parameter is provided with a crafted value via the /goform/formdumpeasysetup API endpoint. Exploitation of this vulnerability by a remote a...
PT-2026-24067
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. This issue is triggered by providing a crafted value to the curTime parameter within the ''goform/formSetWAN Wizard534'' endpoint...
CVE-2025-70243
The D-Link DIR-513 router (version 1.10 ) contains a stack buffer overflow vulnerability in its microprogramming software. The flaw is triggered by providing a crafted value to the curTime parameter via the goform/formSetWAN_Wizard534 endpoint. A remote attacker could exploit this vulnerability t...
CVE-2025-70238
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard52...
CVE-2025-70238
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard52...
PT-2026-24068
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered by providing a crafted value to the curTime parameter within the ''/goform/formdumpeasysetup'' API endpoint...
CVE-2025-70250
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup...
SUSE CVE-2026-27139
On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...
CVE-2025-70232
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetMACFilter...
CVE-2025-70229
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule...
CVE-2025-70230
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS...
CVE-2025-70233
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetEnableWizard...
CVE-2025-29165
An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...
CVE-2025-70231
D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode but fails to filter the value of the FILECODE parameter, resulting in a path traversal vulnerability...
The vulnerability of the `make_indexed_dir()` function in the `fs/ext4/namei.c` file of the Ext4 file system’s kernel in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the makeindexeddir function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...
EUVD-2025-208324
An issue in D-Link DIR-1253 MESH V1.6.1684 allows an attacker to escalate privileges via the etc/shadow.sample component...
EUVD-2025-208318
D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode but fails to filter the value of the FILECODE parameter, resulting in a path traversal vulnerability...