CVE-2025-55602

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter...

CVE-2025-55602

The D-Link DIR-619L home wireless router (firmware version 2.06B01 ) is vulnerable to a Buffer Overflow (CWE-120, CWE-787) in the formSysCmd() function. The root cause is the failure to properly validate the length and size of input data when processing the submit-url parameter. A remote attacker...

CVE-2025-55602

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter...

D-Link DIR-619L 缓冲区错误漏洞

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the submit-ur...

CVE-2025-55602: Out-of-bounds Write

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter...

WordPress BaiduXZH Submit plugin cross-site scripting vulnerability

WordPress BaiduXZH Submit plugin is a third-party WordPress plugin, mainly used for automatic submission of website content to Baidu Bear Paw, to achieve rapid inclusion within 24 hours, and support for original protection features. WordPress BaiduXZH Submit plugin has a cross-site scripting...

The vulnerability in the built-in web server component boa (/boafrm/formTmultiAP) of the TOTOLINK EX1200T router’s microprogramming system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP in the HTTP POST Request Handler of the microprogramming software for router devices TOTOLINK EX1200T lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an...

The vulnerability in the built-in web server component boa (/boafrm/formTmultiAP) of the HTTP POST Request Handler microprogramming system for TOTOLINK A3002R and A3002RU routers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP of the HTTP POST Request Handler in the microprogramming software for TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability...

CVE-2025-49063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in i3geek BaiduXZH Submit百度熊掌号 i3geek-baiduxzh allows Reflected XSS.This issue affects BaiduXZH Submit百度熊掌号: from n/a through = 1.4.6...

Linux Distros Unpatched Vulnerability : CVE-2025-38410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: Fix a fence leak in submit error path In error paths, we could unref the submit without calling drmschedentitypushjob, so msmjobfree will never get...

CVE-2025-49063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in i3geek BaiduXZH Submit百度熊掌号 i3geek-baiduxzh allows Reflected XSS.This issue affects BaiduXZH Submit百度熊掌号: from n/a through = 1.4.6...

CVE-2025-49063 WordPress BaiduXZH Submit(百度熊掌号) plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in i3geek BaiduXZH Submit百度熊掌号 allows Reflected XSS. This issue affects BaiduXZH Submit百度熊掌号: from n/a through 1.4.6...

CVE-2025-49063 WordPress BaiduXZH Submit(百度熊掌号) plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in i3geek BaiduXZH Submit百度熊掌号 i3geek-baiduxzh allows Reflected XSS.This issue affects BaiduXZH Submit百度熊掌号: from n/a through = 1.4.6...

CVE-2025-49063

CVE-2025-49063 corresponds to a reflected XSS in the WordPress BaiduXZH Submit(百度熊掌号) plugin (i3geek-baiduxzh). Affected range is up to version 1.4.6; the root cause is improper neutralization of input during web page generation. Public sources consistently note the vulnerability as unresolved (u...

PT-2025-33192 · Unknown · Baiduxzh Submit

Name of the Vulnerable Software and Affected Versions: BaiduXZH Submit百度熊掌号 versions n/a through 1.4.6 Description: The software contains an improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS issue. Recommendations: Update BaiduXZH...

WordPress plugin BaiduXZH Submit 跨站脚本漏洞

WordPress BaiduXZH Submit plugin is a third-party WordPress plugin, mainly used for automatic submission of website content to Baidu Bear Paw, to achieve rapid inclusion within 24 hours, and support for original protection features. WordPress BaiduXZH Submit plugin has a cross-site scripting...

CVE-2025-49063: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in i3geek BaiduXZH Submit百度熊掌号 i3geek-baiduxzh allows Reflected XSS.This issue affects BaiduXZH Submit百度熊掌号: from n/a through = 1.4.6...

The vulnerability of the wirelessBasic() function in the mod_form.so script of Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the wirelessBasic function in the modform.so microprogramming system for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the operation’s output escapes the buffer in memory when processing the submitSSID1 parameter. Exploiting...

Linux Distros Unpatched Vulnerability : CVE-2023-3355

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msmgemsubmit.c code in the submitlookupcmds function, which fails because it...

Linux Distros Unpatched Vulnerability : CVE-2025-38409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm: Fix another leak in the submit error path putunusedfd doesn't free the installed file, if we've already done fdinstall. So we need to also free the...