CVE-2023-43198

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hiblock.asp function...

CVE-2023-5145

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...

CVE-2022-46432

An exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM Man-in-the-Middle attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service DoS...

CVE-2025-46176

Hardcoded credentials in the Telnet service in D-Link DIR-605L v2.13B01 and DIR-816L v2.06B01 allow attackers to remotely execute arbitrary commands via firmware analysis...

CVE-2021-38543

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

CVE-2021-45998

D-Link device DIR882 DIR882FW1.30B06Hotfix02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request...

CVE-2021-46228

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpddebug.asp. This vulnerability allows attackers to execute arbitrary commands via the time parameter...

CVE-2021-44882

D-Link device DIR878FW1.30B08Hotfix02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request...

CVE-2020-9277

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks e.g., modify the admin password with no authentication...

CVE-2020-13785

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...

CVE-2020-24580

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55. Lack of authentication functionality allows an attacker to assign a static IP address that was once used by a valid user...

CVE-2019-13263

D-link DIR-825AC G1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. A DHCP Request is sent to the router with a certain Transaction ID field. Following the DHCP protocol, the router responds with an ACK or NAK...

CVE-2019-13613

CMDFTESTCONFIG in the TP-Link Device Debug protocol in TP-Link Wireless Router Archer Router version 1.0.0 Build 20180502 rel.45702 EU and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload ...

CVE-2025-4904

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. This vulnerability affects the function sub41F0FC of the file /H5/webgl.data. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2025-4753

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this issue is some unknown functionality of the file /login.data. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2025-4755

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2025-4750

A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R68125. This issue affects some unknown processing of the file /H5/getversion.data of the component Configuration Handler. The manipulation leads to information disclosure. The attack may be...

CVE-2025-4752

A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R68125 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /installbase.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has bee...

CVE-2025-4752

CVE-2025-4752 – D-Link DI-7003GV2 : Information disclosure via improper access control in the file /install_base.data on DI-7003GV2 (version 24.04.18D1 R(68125)). The vulnerability allows remote exploitation and has public disclosures. Affected component is an unknown functionality within that fi...

CVE-2025-4749

The CVE-2025-4749 entry concerns D-Link DI-7003GV2 (FW 24.04.18D1 R68125). Affected component is Factory Reset Handler, specifically function sub_4983B0 in /H5/backup.asp?opt=reset. The vulnerability enables remote denial of service and is supported by public exploit disclosures. Public-enriched ...