Lucene search
K

61645 matches found

CNVD
CNVD
added 2026/03/09 12:0 a.m.2 views

D-Link DIR-513 Stack Buffer Overflow Vulnerability

D-Link DIR-513 is a wireless router product from China's AUO D-Link. The D-Link DIR-513 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

9.8CVSS6.4AI score0.00714EPSS
Exploits1References1
CNVD
CNVD
added 2026/03/09 12:0 a.m.5 views

D-Link DIR-513 Stack Buffer Overflow Vulnerability (CNVD-2026-16147)

D-Link DIR-513 is a wireless router product from China's AUO D-Link. The D-Link DIR-513 suffers from a stack buffer overflow vulnerability that originates from the parameter curTime in file goform/formSetWANWizard51 that fails to properly validate the length size of the input data, which can be...

9.8CVSS6.5AI score0.00716EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2026/03/09 12:0 a.m.3 views

PT-2026-24067

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. This issue is triggered by providing a crafted value to the curTime parameter within the ''goform/formSetWAN Wizard534'' endpoint...

7.5CVSS6.1AI score0.00565EPSS
Exploits1References7
ATTACKERKB
ATTACKERKB
added 2026/03/09 12:0 a.m.4 views

CVE-2025-70243

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard534...

6.1AI score0.00565EPSS
Exploits1References4
CVE
CVE
added 2026/03/09 12:0 a.m.14 views

CVE-2025-70238

CVE-2025-70238 affects D-Link DIR-513 v1.10. The issue is a stack buffer overflow triggered by the curTime parameter in the /goform/formSetWAN_Wizard52 endpoint. Root cause: improper handling of input in that endpoint leads to a stack-based overflow. Impact per sources is a high-severity vulnerab...

7.5CVSS6.1AI score0.00565EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/03/09 12:0 a.m.13 views

CVE-2025-70250

CVE-2025-70250 describes a stack-buffer-overflow in D‑Link DIR‑513 v1.10 triggered by the curTime parameter in the /goform/formdumpeasysetup endpoint. Multiple sources (Red Hat, ENISA EUVD, NVD, OSV, CIRCL, CVE listing) confirm the vulnerability in this specific device/firmware. The issue is loca...

7.5CVSS6.1AI score0.00456EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/03/09 12:0 a.m.30 views

CVE-2025-70250

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formdumpeasysetup...

0.00456EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/09 12:0 a.m.5 views

D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router product from the D-Link company. Version 1.10 of the D-Link DIR-513 contains a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formSetWANWizard52 function...

7.5CVSS6AI score0.00565EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/09 12:0 a.m.6 views

D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router product developed by D-Link Corporation. Version 1.10 of the D-Link DIR-513 contains a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formSetWANWizard534 function...

7.5CVSS6AI score0.00565EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/03/09 12:0 a.m.3 views

PT-2026-24072

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow issue exists in D-Link DIR-513 version 1.10. The issue is triggered by providing a crafted value to the curTime parameter within the ''/goform/formSetWAN Wizard52'' endpoint...

7.5CVSS6.1AI score0.00565EPSS
Exploits1References8
CNNVD
CNNVD
added 2026/03/09 12:0 a.m.6 views

D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router product from the D-Link company. Version 1.10 of the D-Link DIR-513 contains a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formdumpeasysetup function...

7.5CVSS6AI score0.00456EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/09 12:0 a.m.2 views

CVE-2025-70238

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANWizard52...

7.5CVSS6.1AI score0.00565EPSS
Exploits1References4
OSV
OSV
added 2026/03/08 3:15 p.m.2 views

CVE-2026-3741

A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/DfriendLink.php. Such manipulation of the argument linkName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

5.4CVSS4AI score0.00196EPSS
Exploits1References4
CVE
CVE
added 2026/03/08 2:32 p.m.17 views

CVE-2026-3741

YiFang CMS 2.0.5 is affected by CVE-2026-3741 due to a vulnerability in the update function of app/db/admin/D_friendLink.php where manipulation of the linkName parameter enables cross-site scripting. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. No remed...

5.4CVSS4.2AI score0.00196EPSS
Exploits1References4Affected Software1
Circl
Circl
added 2026/03/08 12:13 p.m.2 views

CVE-2026-30957

creationtimestamp| type| source ---|---|--- 2026-03-08 12:13:25+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-jw8q-gjvg-8w4q 2026-03-10 17:10:06+00:00| seen| https://gist.github.com/alon710/d148d1a32996ffa59bd0ec73b5a1d075...

9.9CVSS5.7AI score0.01153EPSS
Exploits1References2
OSV
OSV
added 2026/03/08 10:15 a.m.5 views

CVE-2026-3727

A vulnerability was found in Tenda F453 1.0.0.3. This vulnerability affects the function sub3C6C0 of the file /goform/QuickIndex. The manipulation of the argument mitlinktype/PPPOEPassword results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made publi...

8.8CVSS6.5AI score0.00746EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/03/08 7:57 a.m.11 views

CVE-2026-1073

The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing nonce validation on the settings page form handler in inc/purchase-btn-options-page.php. This makes it possible for...

4.3CVSS5.6AI score0.00126EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.6 views

PT-2026-23947

A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/D friendLink.php. Such manipulation of the argument linkName leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed...

5.1CVSS4.2AI score0.00196EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/08 12:0 a.m.4 views

Yifang CMS 代码注入漏洞

Yifang CMS is a PHP enterprise website development and management system provided by Yifang Corporation. Version 2.0.5 of Yifang CMS has a code injection vulnerability. This vulnerability stems from the handling of the parameter linkName in the file DfriendLink.php, which may lead to cross-site...

5.4CVSS5.7AI score0.00196EPSS
Exploits1References5
Circl
Circl
added 2026/03/07 7:31 p.m.3 views

CVE-2026-30854

creationtimestamp| type| source ---|---|--- 2026-03-07 19:31:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgikvwhgxw2v 2026-03-09 18:40:05+00:00| seen| https://gist.github.com/alon710/b35bd22da36673db291bcd39a01cd730...

6.9CVSS5.8AI score0.00278EPSS
Exploits0References2
Rows per page
Query Builder