74705 matches found
PT-2026-93513
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the v4l2 fwnode parse link function. The remote endpoint fwnode reference is acquired via fwnode graph get remote endpoint, and while it is released during err...
The vulnerability of the /goform/formSysCmd function in the microprogramming software for D-Link DIR-513 allows a hacker to execute arbitrary commands.
The vulnerability of the /goform/formSysCmd function in the microprogramming software for the D-Link DIR-513 router lies in the lack of data cleaning measures at the control level when processing the sysCmd parameter. Exploiting this vulnerability allows an attacker to send arbitrary commands by...
The vulnerability of the `redirect_count_down_page` function in D-Link’s router software DHP-1320 allows a hacker to execute arbitrary code.
The vulnerability of the redirectcountdownpage function in D-Link’s DHP-1320 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the ssdpcgi_main() function in the SSDP component of the D-Link DIR-820LW router’s microprogramming system allows a hacker to execute arbitrary commands.
The vulnerability of the ssdpcgimain function in the SSDP component of the D-Link DIR-820LW router’s software lies in the lack of measures to sanitize input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
The vulnerability of the handler_update_system_time() function (libdeuteron_modules.so) in the NTP Service component of D-Link DIR-825 and DIR-825R router microprogramming software, allowing a attacker to execute arbitrary commands.
The vulnerability of the handlerupdatesystemtime function libdeuteronmodules.so of the NTP Service component of D-Link DIR-825 and DIR-825R routers is related to the lack of measures taken to protect data at the management level. Exploiting this vulnerability could allow a remote attacker to...
The vulnerability of D-link DIR-823G router microprogramming software, related to errors in privilege management, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of D-link DIR-823G router microprogramming software is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the goform/formSetWizardSelectMode() function in the D-Link DIR-513 router software allows a hacker to induce a service failure.
The vulnerability of the goform/formSetWizardSelectMode function in the D-Link DIR-513 router microprogramming system is related to the writing beyond buffer boundaries when processing the curTime parameter. Exploiting this vulnerability could allow an attacker to cause a service failure by sendi...
The vulnerability of the hedwigcgi_main() function in D-Link DIR-645 router’s software allows a hacker to execute arbitrary code.
The vulnerability of the hedwigcgimain function in D-Link DIR-645 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
The vulnerability of the `formAdvanceSetup` function in the `/goform/formAdvanceSetup` file, belonging to the POST Request Handler of the D-Link DIR-513 router’s microprogramming system, allows a intruder to cause a service failure.
The vulnerability of the formAdvanceSetup function in the /goform/formAdvanceSetup file of the POST Request Handler component of the D-Link DIR-513 router microprogramming system is related to the copying of buffer data without checking the size of the input data during the processing of the...
The vulnerability of the Wireless Setup Section component in the microprogramming software of D-Link DSL-2740R routers allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the Wireless Setup Section component in D-Link DSL-2740R microprogramming software is related to the lack of measures taken to protect the website structure when processing the Wireless Network Name parameter. Exploiting this vulnerability allows a remote attacker to perform...
The vulnerability of the tgfile_htm() function in the CGI Endpoint of the D-Link DI-8100 router’s microprogramming system allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the tgfilehtm function in the CGI Endpoint of the D-Link DI-8100 router’s microprogramming system is related to the issue of writing operations outside of the buffer in memory when processing the fn parameter. Exploiting this vulnerability allows an attacker to execute...
The vulnerability of the sub_452CCC() function in D-Link DWR-M960 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the sub452CCC function in D-Link DWR-M960 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...
The vulnerability of the System Information Settings Page component in D-Link DGS-3420 microprogramming software allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the System Information Settings Page component in D-Link DGS-3420 microprogramming devices is related to the lack of protective measures taken for the structure of the web page when processing the System Name parameter. Exploiting this vulnerability allows a malicious actor t...
The vulnerability of the formAdvFirewall function in D-Link DIR-605L router software allows a hacker to execute arbitrary commands.
The vulnerability of the formAdvFirewall function in D-Link DIR-605L router microprogramming systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...
PT-2026-93947
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38565)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from improper access control in the setWanIeCfg function. Attackers can exploit this vulnerability by sending a specially crafted POST...
CVE-2025-56565
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...
The vulnerability of the file_exten_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the fileextenasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
