Lucene search
K

61257 matches found

Cvelist
Cvelist
added 2026/04/10 4:15 a.m.24 views

CVE-2026-6013 D-Link DIR-513 POST Request formSetRoute buffer overflow

A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /goform/formSetRoute of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack may be performed from remote. The explo...

9CVSS0.0074EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/04/10 4:0 a.m.2 views

CVE-2026-6012

A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to be carried out...

9CVSS7.8AI score0.00715EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2026/04/10 4:0 a.m.10 views

CVE-2026-6012

The CVE-2026-6012 entry affects D-Link DIR-513 (firmware 1.10). It targets the POST Request Handler’s /goform/formSetPassword function, where manipulating the curTime argument causes a buffer overflow. Remote exploitation is possible and the exploit has been publicly disclosed. Affected devices a...

9CVSS7.8AI score0.00715EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/04/10 4:0 a.m.26 views

CVE-2026-6012 D-Link DIR-513 POST Request formSetPassword buffer overflow

A security vulnerability has been detected in D-Link DIR-513 1.10. This affects the function formSetPassword of the file /goform/formSetPassword of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to be carried out...

9CVSS0.00715EPSS
Exploits1References5
Circl
Circl
added 2026/04/10 2:30 a.m.2 views

CVE-2026-25414

creationtimestamp| type| source ---|---|--- 2026-04-10 02:30:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj4bonwwlo2c...

8.8CVSS5.7AI score0.00286EPSS
Exploits0References1
Circl
Circl
added 2026/04/10 2:19 a.m.3 views

CVE-2026-1263

creationtimestamp| type| source ---|---|--- 2026-04-10 02:19:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj4b2zhaul24 2026-04-19 17:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjuidmaf7l2c...

6.4CVSS5.8AI score0.00277EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/04/10 1:23 a.m.2 views

CVE-2026-30478

A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable...

8.8CVSS5.9AI score0.00172EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.6 views

EUVD-2026-21189

A vulnerability has been found in D-Link DIR-605L 2.13B01. This affects the function formAdvFirewall of the file /goform/formAdvFirewall of the component POST Request Handler. Such manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has...

9CVSS7.8AI score0.00715EPSS
Exploits1References6
EUVD
EUVD
added 2026/04/10 12:30 a.m.5 views

EUVD-2026-21222

A vulnerability was determined in D-Link DIR-605L 2.13B01. This issue affects the function formSetDDNS of the file /goform/formSetDDNS of the component POST Request Handler. Executing a manipulation of the argument curTime can lead to buffer overflow. The attack can be executed remotely. The...

9CVSS7.8AI score0.00676EPSS
Exploits1References6
EUVD
EUVD
added 2026/04/10 12:30 a.m.2 views

EUVD-2026-21223

A vulnerability was identified in D-Link DIR-605L 2.13B01. Impacted is the function formSetLog of the file /goform/formSetLog of the component POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. The attack is possible to be carried out remotely. The exploit is...

9CVSS7.8AI score0.00784EPSS
Exploits1References6
EUVD
EUVD
added 2026/04/10 12:30 a.m.5 views

EUVD-2026-21080

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

7.3CVSS5.9AI score0.00129EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.5 views

Vikunja 代码问题漏洞

Vikunja is an open-source to-do application developed by Vikunja. Versions of Vikunja prior to 2.3.0 had code vulnerabilities. These vulnerabilities stemmed from the fact that link-sharing authentication was entirely based on JWT claims, without server-side database validation. As a result, delet...

6.5CVSS5.9AI score0.00268EPSS
Exploits1References5
VulnCheck KEV
VulnCheck KEV
added 2026/04/10 12:0 a.m.2 views

VulnCheck KEV: CVE-2024-21833

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...

8.8CVSS6AI score0.01072EPSS
In wildExploits0References2
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.7 views

D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router product from D-Link Corporation. Version 1.10 of the D-Link DIR-513 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file/goform/formSetRoute, specifically the parameter curTime, which may lead to a...

9CVSS7.7AI score0.0074EPSS
Exploits1References5
Packet Storm
Packet Storm
added 2026/04/10 12:0 a.m.76 views

📄 D-Link DIR-650IN Command Injection

Proof of concept details for an authenticated command injection vulnerability in D-Link DIR-650IN. Exploit Title: D-Link DIR-650IN - Authenticated Command Injection Date: 2023-01-08 Exploit Author: Sanjay Singh Vendor Homepage: https://www.dlink.com Software Link:...

5.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.4 views

PT-2026-31945

Title Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade Description Vikunja's link share authentication constructs authorization objects entirely from JWT claims without any server-side database validation. When a project owner deletes a link share or...

6.5CVSS5.8AI score0.00268EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.2 views

PT-2026-31874

A flaw has been found in D-Link DIR-513 1.10. This issue affects the function formAdvanceSetup of the file /goform/formAdvanceSetup of the component POST Request Handler. This manipulation of the argument webpage causes buffer overflow. It is possible to initiate the attack remotely. The exploit...

9CVSS7.7AI score0.00734EPSS
Exploits1References6
CNVD
CNVD
added 2026/04/10 12:0 a.m.1 views

OpenClaw Sandbox Bypass Vulnerability

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a sandbox bypass vulnerability that can be exploited by an attacker to read arbitrary local files using mediaUrl and fileUrl alias parameters that bypass localRoots validation...

8.6CVSS5.5AI score0.00555EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.5 views

PT-2026-31873

A vulnerability was detected in D-Link DIR-513 1.10. This vulnerability affects the function formSetRoute of the file /goform/formSetRoute of the component POST Request Handler. The manipulation of the argument curTime results in buffer overflow. The attack may be performed from remote. The explo...

9CVSS7.7AI score0.0074EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.6 views

PT-2026-31872

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A security issue has been identified in D-Link DIR-513 version 1.10. The formSetPassword function within the POST Request Handler component, located in the file /goform/formSetPassword, is susceptible to...

9CVSS7.7AI score0.00715EPSS
Exploits1References13
Rows per page
Query Builder