8415 matches found
CVE-2026-4182 D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow
A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of the file /goform/form2Wl5RepeaterStep2.cgi of the component goahead. This manipulation of the argument key1/key2/key3/key4/pskValue causes stack-based buffer overflow. Remote exploitation of the attack...
CVE-2026-4181 D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow
A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow. The attack may be launched...
CVE-2026-4181
CVE-2026-4181 affects D-Link DIR-816 (firmware 1.10CNB05) with a stack-based overflow in /goform/form2RepeaterStep2.cgi of the goahead component. The vulnerability arises from improper handling of the key1/key2/key3/key4/pskValue arguments, enabling a remote, potentially unauthenticated attacker ...
CVE-2026-4181
A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function of the file /goform/form2RepeaterStep2.cgi of the component goahead. The manipulation of the argument key1/key2/key3/key4/pskValue results in stack-based buffer overflow. The attack may be launched...
CVE-2026-4180 D-Link DIR-816 goahead redirect.asp access control
A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the argument tokenid leads to improper access controls. The attack may be initiated remotely. The exploit is publicly...
CVE-2026-4180
A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the argument tokenid leads to improper access controls. The attack may be initiated remotely. The exploit is publicly...
CVE-2026-4180
CVE-2026-4180 affects D-Link DIR-816 with firmware 1.10CNB05. The vulnerable component is the goahead-based file redirect.asp; manipulating the token_id parameter yields improper access controls. The attack can be launched remotely and an exploit is publicly available. This vulnerability impacts ...
PT-2026-25555
D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow CVE: CVE-2026-4181 PT-Identifier: PT-2026-25555 Vendor: D-link Product: DIR-816 CVSS: 9.3 Credits: pjqwudi VulDB User Description: A security flaw has been discovered in D-Link DIR-816 1.10CNB05. This affects an unknown function o...
PT-2026-25554
A vulnerability was identified in D-Link DIR-816 1.10CNB05. The impacted element is an unknown function of the file redirect.asp of the component goahead. The manipulation of the argument token id leads to improper access controls. The attack may be initiated remotely. The exploit is publicly...
PT-2026-25557
D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow CVE: CVE-2026-4183 Vendor: D-link Product: DIR-816 CVSS: 9.3 Credits: pjqwudi VulDB User Description: A security vulnerability has been detected in D-Link DIR-816 1.10CNB05. Affected is an unknown function of the file...
PT-2026-25556
D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow CVE: CVE-2026-4182 PT-Identifier: PT-2026-25556 Vendor: D-link Product: DIR-816 CVSS: 9.3 Credits: pjqwudi VulDB User Description: A weakness has been identified in D-Link DIR-816 1.10CNB05. This impacts an unknown function of...
PT-2026-25568
A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05. The affected element is the function...
PT-2026-25535
D-Link DIR-619L boa formSchedule stack-based overflow CVE: CVE-2026-4188 PT-Identifier: PT-2026-25535 Vendor: D-link Product: DIR-619L CVSS: 8.7 Credits: pjqwudi VulDB User Description: A security flaw has been discovered in D-Link DIR-619L 2.06B01. The affected element is the function formSchedu...
PT-2026-25534
D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow CVE: CVE-2026-4184 PT-Identifier: PT-2026-25534 Vendor: D-link Product: DIR-816 CVSS: 9.3 Credits: pjqwudi VulDB User Description: A vulnerability was detected in D-Link DIR-816 1.10CNB05. Affected by this vulnerability is an...
GHSA-H84F-4FF9-8HC3 Apache Livy: Unauthorized directory access
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before 0.9.0. The vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value...
OpenClaw: Sandbox staged writes could escape the verified parent directory before commit
Summary In affected versions of openclaw, sandbox fs-bridge writes validated the destination before commit, but temporary file creation and population were not pinned to a verified parent directory. A raced parent-path alias change could cause the staged temp file to be created outside the intend...
CVE-2025-66249 Apache Livy: Unauthorized directory access
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before 0.9.0. The vulnerability can only be exploited with non-default Apache Livy Server settings. If the configuration value...
EUVD-2025-208621
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWizardSelectMode...
