985 matches found
CVE-2025-25745
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...
CVE-2025-25745
CVE-2025-25745 concerns a stack-based buffer overflow in the D-Link DIR-853 A1 firmware (FW1.20B07), triggered by the Password parameter in the SetQuickVPNSettings module. This affects the device when exposed to network access and, per the CVSS 3.1 vector, requires user interaction and has high i...
CVE-2025-25744
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module...
CVE-2025-25744
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module...
CVE-2025-25746
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...
CVE-2025-25746
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...
D-Link DIR-853 安全漏洞
The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetDynamicDNSSettings module not properly handling user input. No details of the vulnerability are provided at this time...
CVE-2025-25746
D-Link DIR-853 A1 with firmware FW1.20B07 is affected by a stack-based buffer overflow in the SetWanSettings module, triggered by the Password parameter. The vulnerability affects the DIR-853 A1; details in PT-2025-7104 and CVE-2025-25746 indicate a critical issue (CVSS 9.8). There is no publishe...
D-Link DIR-853 安全漏洞
The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetWanSettings module not properly handling user input. No details of the vulnerability are provided at this time...
CVE-2025-25744
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module...
CVE-2025-25746
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...
PT-2025-7102 · D Link · D-Link Dir-853
Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07 Description: A stack-based buffer overflow issue was discovered through the Password parameter in the SetDynamicDNSSettings module. This allows for potential exploitation. No information is provided about t...
PT-2025-7104 · D Link · D-Link Dir-853
Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07 Description: A stack-based buffer overflow issue was discovered through the Password parameter in the SetWanSettings module. This allows for potential exploitation. Recommendations: For D-Link DIR-853 A1...
PT-2025-3437 · Unknown · Safety Production Process Management System
Name of the Vulnerable Software and Affected Versions: Safety production process management system version 1.0 Description: The issue allows a remote attacker to escalate privileges, execute arbitrary code, and obtain sensitive information via the password and account number parameters...
needyamin SQL注入漏洞
needyamin is an open source library card borrowing system by needyamin. A SQL injection vulnerability exists in needyamin version 1.0, which stems from an incorrect manipulation of the email/password parameter that can lead to sql injection...
Vulnerability of web-based interfaces for microprogramming software Wi-Fi routers such as Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360 allow attackers to increase their privileges
The vulnerability of the web-based management interfaces for Netis microprogramming systems, including Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360, lies in the ability to read data beyond the permitted range in memory. Exploitin...
Online Shoe Store /login.php File SQL Injection Vulnerability
Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of the password parameter in the /function/login.php page against externally entered SQL statements. An attacker can exploit this vulnerabilit...
CVE-2024-46209
A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...
CVE-2024-46209
A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...
CVE-2024-46209
REDAXO CMS v5.17.1 is affected by a stored cross-site scripting (XSS) vulnerability in the /media/test.html component, caused by improper input validation that allows injection via the password parameter. Exploitation details are not provided in the sources, and in-the-wild status is not specifie...