1840 matches found
CVE-2025-8169 D-Link DIR-513 HTTP POST Request formSetWanPPTPpath formSetWanPPTPcallback buffer overflow
A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPcallback of the file /goform/formSetWanPPTPpath of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. It is possible to...
CVE-2025-8169
Summary: CVE-2025-8169 affects the D-Link DIR-513 (v1.10) plaguing the HTTP POST request handler file, specifically the function formSetWanPPTPcallback in /goform/formSetWanPPTPpath. The vulnerability arises from improper handling of the curTime parameter, causing a buffer overflow that can be tr...
CVE-2025-8166 code-projects Church Donation System HTTP POST Request index.php sql injection
A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...
CVE-2025-8166 code-projects Church Donation System HTTP POST Request index.php sql injection
A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...
CVE-2025-8166
CVE-2025-8166 affects code-projects Church Donation System 1.0. A SQL injection vulnerability exists in the HTTP POST Request Handler, specifically in /admin/index.php where manipulating the Username argument can be exploited remotely. The exploit has been disclosed publicly and may be used. Mult...
CVE-2014-125117
A stack-based buffer overflow vulnerability in the mycgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code...
CVE-2014-125117 D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
A stack-based buffer overflow vulnerability in the mycgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code...
CVE-2014-125117 D-Link info.cgi POST Request Stack-Based Buffer Overflow RCE
A stack-based buffer overflow vulnerability in the mycgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code...
CVE-2014-125117
CVE-2014-125117 : A stack-based buffer overflow in the my_cgi.cgi component of certain D‑Link devices, including DSP‑W215 v1.02, can be triggered by a crafted HTTP POST to /common/info.cgi, enabling unauthenticated remote code execution with system‑level privileges. Exploitation details indicate ...
CVE-2025-8159 D-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflow
A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. This issue affects the function formLanguageChange of the file /goform/formLanguageChange of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to stack-based buffer overflow. The...
CVE-2025-8159
CVE-2025-8159 affects D-Link DIR-513 (firmware 1.0). The vulnerability is in the HTTP POST Request Handler, specifically the formLanguageChange function in /goform/formLanguageChange. Manipulating the curTime argument triggers a stack-based buffer overflow, with remote exploitation possible. The ...
CVE-2025-8159 D-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflow
A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. This issue affects the function formLanguageChange of the file /goform/formLanguageChange of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to stack-based buffer overflow. The...
CVE-2025-8139
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possible to...
CVE-2025-8140
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formWlanMultipleAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...
CVE-2025-8140 TOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflow
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formWlanMultipleAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...
CVE-2025-8140
TOTOLINK A702R, version 4.0.0-B20230721.1521, contains a buffer overflow in the HTTP POST Request Handler’s file /boafrm/formWlanMultipleAP triggered by manipulating the submit-url parameter. The vulnerability allows remote exploitation and is labeled critical. Multiple connected sources confirm ...
CVE-2025-8140 TOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflow
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formWlanMultipleAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...
CVE-2025-8139 TOTOLINK A702R HTTP POST Request formPortFw buffer overflow
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possible to...
CVE-2025-8139
TOTOLINK A702R (firmware 4.0.0-B20230721.1521) contains a vulnerable HTTP POST Request Handler in /boafrm/formPortFw where manipulation of the service_type argument triggers a buffer overflow. This allows remote exploitation; exploits have been publicly disclosed. Several sources corroborate the ...
CVE-2025-8139 TOTOLINK A702R HTTP POST Request formPortFw buffer overflow
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possible to...