CVE-2026-2857

A vulnerability was determined in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub423E00 of the file /boafrm/formPortFw of the component Port Forwarding Configuration Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Remote exploitation ...

D-Link DWR-M960 security vulnerability

The D-Link DWR-M960 is a router produced by D-Link Corporation. The D-Link DWR-M960 version 1.01.07 has a security vulnerability. This vulnerability stems from incorrect handling of parameters in the file /boafrm/formLteSetup, specifically the submit-url parameter. This could lead to a stack buff...

sub_424054() and sub_41EA94() functions Code Execution

The vulnerability of the sub424054 and sub41EA94 functions in the embedded web server of D-Link’s router microprogramming systems DIR-822K and DWR-M920 is related to the escape of operations from the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a...

TOTOLINK EX1200T security vulnerabilities

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T 4.1.2cu.5232B20210713 suffers from a buffer overflow vulnerability that originates from the parameter submit-url in file /boafrm/formSysLog failing to correctly validate the length size of the...