8415 matches found
CVE-2025-70236
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter...
CVE-2025-70234
CVE-2025-70234 concerns a stack buffer overflow in D-Link DIR-513 v1.10, triggered by the curTime parameter in the endpoint goform/formSetQoS. CNVD-2026-16146 and RH/OSV entries describe potential arbitrary code execution or denial of service due to improper input length validation of the curTime...
CVE-2025-70239
Mode C: CVE-2025-70239 affects D-Link DIR-513 v1.10. The vulnerability is a stack buffer overflow in the goform/formSetWAN_Wizard55 handler triggered by the curTime parameter. Public sources consistently identify the affected product and vulnerable component as DIR-513, version 1.10, with the iss...
CVE-2025-70241
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANTypeWizard5...
CVE-2025-70240
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard51...
PT-2026-22801
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType Wizard5...
PT-2026-22824
Name of the Vulnerable Software and Affected Versions D-Link DIR-868L version 110b03 Description A flaw exists in the SSDP Service component, specifically within the sub 1BF84 function, of the D-Link DIR-868L. Manipulation of the ST argument can lead to operating system command injection. This...
PT-2026-22812
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. This issue is triggered by providing a crafted value to the curTime parameter within the ''/goform/formSetQoS'' endpoint...
PT-2026-22792
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow issue exists in D-Link DIR-513 version 1.10. The issue is related to the curTime parameter within the ''goform/formSetDomainFilter'' endpoint. This allows for a potential overflow...
EUVD-2025-208256
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr...
CVE-2025-70237
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr...
CVE-2025-70241
CVE-2025-70241 is a stack buffer overflow in D-Link DIR-513 v1.10 exploitable via the curTime parameter to goform/formSetWANType_Wizard5. Public details identify an impacted device and vulnerable component, with network-based access and no user interaction required, and a high to critical impact ...
CVE-2025-70239
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard55...
CVE-2025-70234
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS...
D-Link DIR-513 安全漏洞
The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the curTime parameter within the goform/formSetWANWizard55 function...
WordPress Backup Migration 1.3.7 - Remote Command Execution
Exploit Title: WordPress Backup Migration 1.3.7 - Remote Command Execution Date: 2025-10-26 Exploit Author: DANG Vendor Homepage: https://backupbliss.com/ Software Link: https://wordpress.org/plugins/backup-backup/ Version: Backup Migration ≤1.3.7 Tested on: LINUX CVE : CVE-2023-6553 This module...
EUVD-2025-208264
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS...
CVE-2026-3051
DataLinkDC dinky (up to 1.2.5) is affected by CVE-2026-3051. The vulnerability is in the getProjectDir function of git-related code (dinky-admin/src/main/java/org/dinky/utils/GitRepository.java, Project Name Handler). Improper handling of the projectName argument enables path traversal, with remo...
CVE-2026-3051 DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal
A vulnerability has been found in DataLinkDC dinky up to 1.2.5. The affected element is the function getProjectDir of the file dinky-admin/src/main/java/org/dinky/utils/GitRepository.java of the component Project Name Handler. Such manipulation of the argument projectName leads to path traversal...
Dinky 路径遍历漏洞
Dinky is an open-source real-time computing platform developed by DataLinkDC. Versions of Dinky 1.2.5 and earlier contained a path traversal vulnerability. This vulnerability stemmed from incorrect handling of the parameter projectName in the getProjectDir function of the Project Name Handler...