Lucene search
+L

985 matches found

Vulnrichment
Vulnrichment
added 2025/02/14 12:0 a.m.12 views

CVE-2025-25745

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetQuickVPNSettings module...

9AI score0.00726EPSS
SaveExploits1References1
CVE
CVE
added 2025/02/14 12:0 a.m.106 views

CVE-2025-25745

CVE-2025-25745 concerns a stack-based buffer overflow in the D-Link DIR-853 A1 firmware (FW1.20B07), triggered by the Password parameter in the SetQuickVPNSettings module. This affects the device when exposed to network access and, per the CVSS 3.1 vector, requires user interaction and has high i...

8.8CVSS7.8AI score0.00726EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2025/02/12 5:15 p.m.31 views

CVE-2025-25744

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module...

9.8CVSS0.00572EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/12 5:15 p.m.7 views

CVE-2025-25744

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module...

9.8CVSS6.2AI score0.00572EPSS
SaveExploits1References1
OSV
OSV
added 2025/02/12 5:15 p.m.8 views

CVE-2025-25746

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...

9.8CVSS6.1AI score0.00572EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/02/12 12:0 a.m.8 views

CVE-2025-25746

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...

8AI score0.00572EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.6 views

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetDynamicDNSSettings module not properly handling user input. No details of the vulnerability are provided at this time...

9.8CVSS7.3AI score0.00572EPSS
SaveExploits1References1
CVE
CVE
added 2025/02/12 12:0 a.m.108 views

CVE-2025-25746

D-Link DIR-853 A1 with firmware FW1.20B07 is affected by a stack-based buffer overflow in the SetWanSettings module, triggered by the Password parameter. The vulnerability affects the DIR-853 A1; details in PT-2025-7104 and CVE-2025-25746 indicate a critical issue (CVSS 9.8). There is no publishe...

9.8CVSS7.8AI score0.00572EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.8 views

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetWanSettings module not properly handling user input. No details of the vulnerability are provided at this time...

9.8CVSS7.3AI score0.00572EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/02/12 12:0 a.m.8 views

CVE-2025-25744

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module...

8AI score0.00572EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/02/12 12:0 a.m.57 views

CVE-2025-25746

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module...

0.00572EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/02/07 12:0 a.m.14 views

PT-2025-7102 · D Link · D-Link Dir-853

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07 Description: A stack-based buffer overflow issue was discovered through the Password parameter in the SetDynamicDNSSettings module. This allows for potential exploitation. No information is provided about t...

10CVSS7.5AI score0.00572EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/02/07 12:0 a.m.7 views

PT-2025-7104 · D Link · D-Link Dir-853

Name of the Vulnerable Software and Affected Versions: D-Link DIR-853 A1 version FW1.20B07 Description: A stack-based buffer overflow issue was discovered through the Password parameter in the SetWanSettings module. This allows for potential exploitation. Recommendations: For D-Link DIR-853 A1...

9.8CVSS7.5AI score0.00572EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/01/29 12:0 a.m.7 views

PT-2025-3437 · Unknown · Safety Production Process Management System

Name of the Vulnerable Software and Affected Versions: Safety production process management system version 1.0 Description: The issue allows a remote attacker to escalate privileges, execute arbitrary code, and obtain sensitive information via the password and account number parameters...

9.8CVSS7.8AI score0.00669EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.8 views

needyamin SQL注入漏洞

needyamin is an open source library card borrowing system by needyamin. A SQL injection vulnerability exists in needyamin version 1.0, which stems from an incorrect manipulation of the email/password parameter that can lead to sql injection...

9.8CVSS8AI score0.00607EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:0 a.m.14 views

Vulnerability of web-based interfaces for microprogramming software Wi-Fi routers such as Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360 allow attackers to increase their privileges

The vulnerability of the web-based management interfaces for Netis microprogramming systems, including Netis NX10, Netis 11AC Router NC65, Netis 11AC Router NC63, Netis 11AC Router NC21, and Netis Wifi Router MW5360, lies in the ability to read data beyond the permitted range in memory. Exploitin...

7.8CVSS7.6AI score0.17289EPSS
SaveExploits1References2Affected Software5
CNVD
CNVD
added 2025/01/10 12:0 a.m.3 views

Online Shoe Store /login.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of the password parameter in the /function/login.php page against externally entered SQL statements. An attacker can exploit this vulnerabilit...

9.8CVSS8.4AI score0.00687EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/06 7:15 p.m.10 views

CVE-2024-46209

A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...

5.4CVSS5.9AI score0.00403EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/01/06 12:0 a.m.22 views

CVE-2024-46209

A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter...

0.00403EPSS
SaveExploits1References2
CVE
CVE
added 2025/01/06 12:0 a.m.71 views

CVE-2024-46209

REDAXO CMS v5.17.1 is affected by a stored cross-site scripting (XSS) vulnerability in the /media/test.html component, caused by improper input validation that allows injection via the password parameter. Exploitation details are not provided in the sources, and in-the-wild status is not specifie...

5.4CVSS5.6AI score0.00403EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder