D-Link DIR-600L formLogin Function Buffer Overflow Vulnerability

The D-Link DIR-600L is an entry-level wireless router from China's AUO D-Link that supports 150Mbps wireless transmission and four 100 megabit wired ports. The D-Link DIR-600L suffers from a buffer overflow vulnerability that originates from the parameter host of the function formLogin that fails...

CVE-2025-4344 D-Link DIR-600L formLogin buffer overflow

A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. This affects the function formLogin. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. This vulnerability only affects products that are no...

D-Link DIR-600L 安全漏洞

The D-Link DIR-600L is an entry-level wireless router from China's AUO D-Link that supports 150Mbps wireless transmission and four 100 megabit wired ports. The D-Link DIR-600L suffers from a buffer overflow vulnerability that originates from the parameter host of the function formLogin that fails...

PT-2025-19934 · D Link · D-Link Dir-600

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600L versions up to 2.07B01 Description: A critical issue was found in the formLogin function, where manipulation of the host argument leads to a buffer overflow. This can be initiated remotely. The issue only affects products that...

CVE-2023-37791

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

CVE-2023-37791

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

Stack overflow

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

CVE-2023-37791

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

CVE-2023-37791

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

CVE-2023-37791

Summary (CVE-2023-37791) : A stack/buffer overflow exists in the D-Link DIR-619L v2.04(TW) firmware, triggered by the curTime parameter in /goform/formLogin. Multiple sources (CNVD/CNNVD/NVD entries) describe remote exploitation potential that could lead to arbitrary code execution or DoS. The ex...

D-Link DIR-619 缓冲区错误漏洞

The D-Link DIR-619 is a series of routers from the Chinese company AUO D-Link. A buffer overflow vulnerability exists in D-Link DIR-619L v2.04TW, which stems from the curTime parameter of /goform/formLogin failing to correctly validate the length size of the input data, and can be exploited by a...

CVE-2023-24351

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin...

Stack overflow

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin...

CVE-2022-30694

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack...

Cross site request forgery (csrf)

The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack...

CVE-2019-19825

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an "topicurl":"setting/getSanvas" POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform...

Design/Logic Flaw

On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an "topicurl":"setting/getSanvas" POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. Also, the CAPTCHA text is not needed once the attacker has determined valid credentials. The attacker can perform...

CVE-2018-17067

An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address...

Security Bulletin: Potential spoofing attack in IBM WebSphere Application Server in IBM Cloud (CVE-2017-1788)

Summary There is a potential spoofing attack in WebSphere Application Server using Form Login. Vulnerability Details CVEID: CVE-2017-1788 DESCRIPTION: IBM WebSphere Application Server installations using Form Login could allow a remote attacker to conducts spoofing attacks. CVSS Base Score: 5.3...

HP Power Manager formLogin buffer overflow

Added: 12/28/2010 CVE: CVE-2010-4113 OSVDB: 69969 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability in the Administration interface allows remote attackers to...