45643 matches found
CVE-2025-50670
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglbwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in the name, qq, and time parameters...
CVE-2025-50671
A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (firmware version 16.07.26A1 ) due to incorrect bounds checking of parameters in the /xwgl_ref.asp endpoint. A remote attacker can exploit this by sending a crafted HTTP GET request containing excessively lon...
WordPress plugin Freeio has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
Linux Distros Unpatched Vulnerability : CVE-2026-28810
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Generation of Predictable Numbers or Identifiers vulnerability in Erlang/OTP kernel inetres, inetdb modules allows DNS Cache Poisoning. The built-in DNS resolve...
CVE-2025-50662
A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (firmware version 16.07.26A1 ). The flaw stems from the improper handling of the name parameter within the /url_group.asp endpoint. An attacker can exploit this by sending a specially crafted GET request to t...
CVE-2026-5895: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name. Chromium security severity: Low...
WordPress plugin OrganicFood has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress plugin Emphires has a security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
CVE-2025-50653
CVE-2025-50653 affects D-Link DI-8003 devices (firmware 16.07.26A1). A buffer overflow is triggered by improper handling of the name and mem parameters in the /time_group.asp endpoint. CNVD-2026-17635 and RH/CVEs describe a boundary/overflow condition leading to denial of service; NVD metrics ind...
CVE-2025-50662
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...
CVE-2025-50663
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usbpaswd.asp endpoint...
PT-2026-31388
Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of input parameters. An attacker can exploit this by sending a crafted HTTP GET request to the /web keyword.asp endpoint using the name, en, time,...
CVE-2025-50655
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thdgroup.asp endpoint...
CVE-2025-50660
A stack-based buffer overflow vulnerability exists in the D-Link DI-8003 wireless router (version 16.07.26A1 ). The flaw is caused by the improper validation of the length and size of input data for the name parameter in the /url_member.asp endpoint. A remote attacker can exploit this by sending ...
CVE-2025-50670
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwglbwr.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request in the name, qq, and time parameters...
CVE-2025-50653: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /timegroup.asp endpoint...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006603)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006603 advisory. In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Correct devm device reference for hidinput inputdev name Reference the HID devic...
PT-2026-31385
Name of the Vulnerable Software and Affected Versions D-Link DI-8003 version 16.07.26A1 Description A buffer overflow exists due to improper handling of the name parameter in the /url group.asp endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability...
CVE-2025-50663: Stack-based Buffer Overflow
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usbpaswd.asp endpoint...
D-Link DI-8003 security vulnerability
The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability stems from the name parameter in the /urlmember.asp endpoint failing to properly validate the length and size of the input data, which can be...