PT-2025-53716

Name of the Vulnerable Software and Affected Versions D-Link DWR-M920 versions up to 1.1.50 Description A flaw exists in D-Link DWR-M920. The issue is related to a buffer overflow in the sub 464794 function within the /boafrm/formDefRoute file. Manipulation of the submit-url argument can trigger...

D-Link DWR-M920 安全漏洞

The D-Link DWR-M920 is a 4GLTE wireless router manufactured by Youxun D-Link. The D-Link DWR-M920 suffers from a buffer overflow vulnerability that stems from the incorrect manipulation of the parameter submit-url in the function sub464794 in the file /boafrm/formDefRoute, for which no detailed...

CVE-2025-13551

A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.0020250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. The attack is possible to be carried out remotely. Th...

EUVD-2025-198567

A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be use...

D-Link DWR-M920和D-Link DIR-822K 安全漏洞

D-Link DWR-M920 and D-Link DIR-822K are both products of China's AUO D-Link.The D-Link DWR-M920 is a router.The D-Link DIR-822K is a wireless router.The D-Link DWR-M920 and D-Link DIR-822K are both products of China's AUO D-Link.The D-Link DWR-M920 and D-Link DIR-822K are wireless routers. A...

CVE-2025-54401

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2025-54402

Planet WGR-500 v1.3411b190912 contains multiple stack-based buffer overflow flaws in the formPingCmd HTTP handling, cited as CVE-2025-54402 among TALOS-2025-2226. The root cause is unsafe use of stack and heap buffers while composing command and request-data strings: submit-url, ipaddr, and count...

CVE-2025-54401

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2025-54401

Planet WGR-500 v1.3411b190912 contains stack-based buffer overflow vulnerabilities in the web server formPingCmd function. Specifically, CVE-2025-54401 stems from unsafe handling of the submit-url parameter copied into a 260-byte buffer (buffer_260) without bounds checking, with additional relate...

EUVD-2025-32862

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

EUVD-2016-1500

Malware in sbrugna...

EUVD-2018-1443

Malware in sbrugna...

PT-2025-41002

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of HTTP requests to trigger these issues. The submit-url request parameter is...

EUVD-2025-28720

Malicious code in bioql PyPI...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability that originates from the parameter submit-url in file...

D-Link DIR-619L 缓冲区错误漏洞

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the submit-ur...

CVE-2025-55602

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter...

CVE-2025-55602

D-Link DIR-619L firmware 2.06B01 is affected by a buffer overflow in the formSysCmd function via the submit-url parameter. The issue permits network-exposed exploitation with low complexity and can impact availability (DoS) and integrity/confidentiality as per CVSS notes, though the documents do ...

The vulnerability of the built-in boa server (/boafrm/formRoute) of the TOTOLINK X15 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the built-in boa server /boafrm/formRoute of the TOTOLINK X15 router software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the built-in BOA server (/boafrm/formMultiAPVLAN) of the TOTOLINK X15 router’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the built-in server boa /boafrm/formMultiAPVLAN of the TOTOLINK X15 microprogrammed router software is related to the issue where the operation’s output goes beyond the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote...