Lucene search
K

25 matches found

NVD
NVD
added 2026/02/23 1:16 a.m.7 views

CVE-2026-2960

A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...

9CVSS0.00728EPSS
Exploits1References5
OSV
OSV
added 2026/02/23 1:16 a.m.4 views

CVE-2026-2960

A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...

8.8CVSS6.5AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/02/23 12:2 a.m.5 views

CVE-2026-2960 D-Link DWR-M960 formDhcpv6s sub_468D64 stack-based overflow

A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and...

9CVSS8.8AI score0.00728EPSS
Exploits1References5
CVE
CVE
added 2026/02/23 12:2 a.m.20 views

CVE-2026-2960

The CVE-2026-2960 affects D-Link DWR-M960 firmware 1.01.07. A flaw in the /boafrm/formDhcpv6s module’s sub_468D64 function allows manipulation of the submit-url to cause a stack-based buffer overflow, enabling remote access. Exploit details have been published and may be used. Remediation recomme...

9CVSS8.7AI score0.00728EPSS
Exploits1References5Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2025-14504

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00304EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-14607

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.0053EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-14496

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.03402EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.4 views

The vulnerability of the formDhcpv6s function in the Totolink A3002R router’s software allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the formDhcpv6s function in the Totolink A3002R router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

6.5CVSS5.8AI score0.00285EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2025/05/20 12:0 a.m.1 views

TOTOLINK A3002R formDhcpv6s Interface Buffer Overflow Vulnerability

The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the failure of the addrPoolStart parameter in the formDhcpv6s interface to correctly validate the length size of the input data, no...

5.4CVSS6.7AI score0.03402EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/05/20 12:0 a.m.2 views

TOTOLINK A3002R 安全漏洞

TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from the interfacenameds parameter in the formDhcpv6s interface failing to correctly validate the length size of the input data, no detailed...

6.5CVSS7.2AI score0.00285EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/05/20 12:0 a.m.9 views

CVE-2025-45862

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface...

0.00285EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/15 12:10 a.m.15 views

CVE-2025-45864

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface...

5.4CVSS7.9AI score0.03402EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/15 12:10 a.m.16 views

CVE-2025-45866

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolEnd parameter in the formDhcpv6s interface...

5.4CVSS7.9AI score0.00304EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/15 12:10 a.m.18 views

CVE-2025-45865

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface...

9.8CVSS7.9AI score0.0053EPSS
Exploits1References1
NVD
NVD
added 2025/05/13 7:15 p.m.15 views

CVE-2025-45865

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface...

9.8CVSS0.0053EPSS
Exploits1References2
OSV
OSV
added 2025/05/13 7:15 p.m.2 views

CVE-2025-45865

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the dnsaddr parameter in the formDhcpv6s interface...

9.8CVSS6.1AI score0.0053EPSS
Exploits1References2
NVD
NVD
added 2025/05/13 3:15 p.m.12 views

CVE-2025-45864

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface...

5.4CVSS0.03402EPSS
Exploits1References2
OSV
OSV
added 2025/05/13 3:15 p.m.2 views

CVE-2025-45864

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface...

5.4CVSS6AI score0.03402EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/05/13 12:0 a.m.6 views

CVE-2025-45864

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the addrPoolStart parameter in the formDhcpv6s interface...

8AI score0.03402EPSS
Exploits1References2
CVE
CVE
added 2025/05/13 12:0 a.m.50 views

CVE-2025-45865

CVE-2025-45865 affects TOTOLINK A3002R firmware version 4.0.0-B20230531.1404. The vulnerability is a buffer overflow in the dnsaddr parameter of the formDhcpv6s interface, caused by insufficient validation of input length/size. This can lead to arbitrary code execution or a Denial of Service, wit...

9.8CVSS8AI score0.0053EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder