Argo Workflow has a Zipslip Vulnerability

Vulnerability Description Vulnerability Overview 1. During the artifact extraction process, the unpack function extracts the compressed file to a temporary directory /etc.tmpdir and then attempts to move its contents to /etc using the rename system call, 2. However, since /etc is an already...

The vulnerability of the soapcgi_main() function in the /soap.cgi script of the D-Link DIR-816L router’s software allows a hacker to execute arbitrary code.

The vulnerability of the soapcgimain function in the /soap.cgi script of the D-Link DIR-816L router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the service parameter. Exploiting this vulnerability allows an attacker operati...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software allows a hacker to execute arbitrary commands.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-852 microprogrammed router software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2025-33356

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-61577: Stack-based Buffer Overflow

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

VulnCheck KEV: CVE-2018-10957

CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...

VulnCheck KEV: CVE-2022-37129

D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2025-41393

Name of the Vulnerable Software and Affected Versions D-Link DIR-816A2 version FWv1.10CNB05 Description The D-Link DIR-816A2 firmware version FWv1.10CNB05 contains a stack overflow issue. This occurs through the statuscheckpppoeuser parameter within the dir setWanWifi function. A crafted input to...

CVE-2025-61577

The D-Link DIR-816A2 router, specifically running firmware version FWv1.10CNB05 , is vulnerable to a stack-based buffer overflow . The root cause is the dir_setWanWifi function's failure to properly validate the length and size of input data provided via the statuscheckpppoeuser parameter. An att...

D-Link DIR-816A2 安全漏洞

The D-Link DIR-816A2 is a router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-816A2 FWv1.10CNB05 version, which originates from the statuscheckpppoeuser parameter in the dirsetWanWifi function that fails to correctly validate the length and size of the input...

CVE-2025-11488

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

CVE-2025-11488 D-Link DIR-852 HNAP1 command injection

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

CVE-2025-11488 D-Link DIR-852 HNAP1 command injection

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

CVE-2025-11488

Summary: CVE-2025-11488 affects D-Link DIR-852 routers. Multiple connected sources confirm a vulnerability in the /HNAP1/ file handling, enabling remote command injection via crafted input. Affected versions are cited as prior to 20251003, with exploit code publicly available. The issue is associ...

PT-2025-41296

Name of the Vulnerable Software and Affected Versions D-Link DIR-852 versions prior to 20251003 Description A flaw exists in D-Link DIR-852. This issue affects an unspecified component of the /HNAP1/ file. Successful manipulation can result in command injection. The attack can be initiated...

CVE-2025-11488: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

D-Link DIR-852 命令注入漏洞

D-Link DIR-852 is a dual-band Gigabit wireless router from Youxun Technology, focusing on home networking solutions and supporting Xunlei remote download function. The D-Link DIR-852 suffers from a command injection vulnerability that stems from the failure of file /HNAP1/ to properly filter...