986 matches found
CVE-2025-60555
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWizardSelectMode...
CVE-2025-60558
The D-Link DIR600L wireless router (Ax series) is vulnerable to a stack-based buffer overflow in the formVirtualServ function. The root cause is the improper validation of the length of input data when processing the curTime parameter, leading to the copying of buffers without size checks. A mali...
CVE-2025-60558
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formVirtualServ...
PT-2025-43639
Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow issue. This occurs through the curTime parameter within the formSetWizardSelectMode function. Recommendations At the...
CVE-2025-60331
D-Link DIR-823G A1 v1.0.2B05 was discovered to contain a buffer overflow in the FillMacCloneMac parameter in the /EXCUSHELL endpoint. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60344
A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...
CVE-2025-52079
The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Unverified Password Change via crafted POST request to /getset.ccp...
EUVD-2025-35178
An unauthenticated Local File Inclusion LFI vulnerability in D-Link DSR series routers allows remote attackers to retrieve sensitive configuration files in clear text. The exposed files contain administrative credentials, VPN settings, and other sensitive information, enabling full administrative...
CVE-2025-34254
D-Link Nuclias Connect firmware versions = 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the...
The vulnerability of D-Link Nuclias Connect software for centralized control of wireless networks arises from incorrect path name restrictions in the restricted access directory. This allows attackers to delete any files they desire.
The vulnerability of D-Link Nuclias Connect wireless network management software is related to an incorrect path name limitation in the access-limited directory. Exploiting this vulnerability could allow a remote attacker to delete any files they desire...
CVE-2025-34248
D-Link Nuclias Connect firmware versions 1.3.1.4 contain a directory traversal vulnerability within /api/web/dnc/global/database/deleteBackup due to improper sanitization of the deleteBackupList parameter. This can allow an authenticated attacker to delete arbitrary files impacting the integrity...
EUVD-2025-33356
D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-11408 D-Link DI-7001 MINI dbsrv.asp buffer overflow
A security vulnerability has been detected in D-Link DI-7001 MINI 24.04.18B1. The affected element is an unknown function of the file /dbsrv.asp. Such manipulation of the argument str leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be...
CVE-2025-11407 D-Link DI-7001 MINI upgrade_filter.asp os command injection
A weakness has been identified in D-Link DI-7001 MINI 24.04.18B1. Impacted is an unknown function of the file /upgradefilter.asp. This manipulation of the argument path causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could b...
CVE-2025-11335
A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...
EUVD-2020-11223
Malware in sbrugna...
EUVD-2010-2302
Malware in sbrugna...
EUVD-2010-2303
Malware in sbrugna...