CVE-2025-46108

The CVE-2025-46108 entry concerns the D-Link Dir-513 A1FW110 device. A buffer overflow in the formTcpipSetup function is identified, with CVSS v3.1 base metrics indicating a network-based, unauthenticated exploit (no user interaction) and high impact to confidentiality, integrity, and availabilit...

CVE-2025-70223

CVE-2025-70223 affects D-Link DIR-513 v1.10. The issue is a stack buffer overflow in the curTime parameter to goform/formAdvNetwork, with CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8). The vulnerability is network‑level, requires no privileges and no user interaction, and impacts confi...

CVE-2025-70239

Mode C: CVE-2025-70239 affects D-Link DIR-513 v1.10. The vulnerability is a stack buffer overflow in the goform/formSetWAN_Wizard55 handler triggered by the curTime parameter. Public sources consistently identify the affected product and vulnerable component as DIR-513, version 1.10, with the iss...

CVE-2025-8169

Summary: CVE-2025-8169 affects the D-Link DIR-513 (v1.10) plaguing the HTTP POST request handler file, specifically the function formSetWanPPTPcallback in /goform/formSetWanPPTPpath. The vulnerability arises from improper handling of the curTime parameter, causing a buffer overflow that can be tr...

CVE-2025-10792

D-Link DIR-513 A1FW110 is affected by a buffer overflow in the /goform/formWPS function caused by manipulation of the webpage argument. The issue can be exploited remotely and is considered high severity (CVSS ~8.8). Several sources confirm the vulnerability and remote feasibility, with exploit m...

CVE-2025-7910

CVE-2025-7910 affects D-Link DIR-513 firmware 1.10, where Boa Webserver’s /goform/formSetWanNonLogin uses sprintf on curTime, causing a stack-based buffer overflow. The vulnerability is remotely exploitable, with publicly disclosed exploit details and high impact on confidentiality, integrity, an...

CVE-2025-8168

The CVE-2025-8168 entry concerns D-Link DIR-513 firmware v1.10. The vulnerability is in the websAspInit function of /goform/formSetWanPPPoE, where manipulating the curTime argument causes a buffer overflow. Exploitation can be remote, and multiple sources indicate the exploit has been disclosed p...

CVE-2025-70226

CVE-2025-70226: A stack buffer overflow in D-Link DIR-513 v1.10 is triggered by the curTime parameter to goform/formEasySetupWizard. The issue affects the device firmware; the cited description, CVSSv3.1 base score 9.8 (CRITICAL) indicates high impact on confidentiality, integrity, and availabili...

CVE-2025-70229

Summary: CVE-2025-70229 is a stack buffer overflow in D-Link DIR-513 v1.10, triggered by the curTime parameter of the /goform/formSchedule endpoint. The vulnerability affects the device’s ability to process crafted input, potentially impacting availability, integrity, and confidentiality as indic...

CVE-2026-4486

D-Link DIR-513 (firmware 1.10) Web Service: The formEasySetPassword function in /goform/formEasySetPassword is vulnerable. Manipulating the curTime argument leads to a stack-based buffer overflow, with remote access possible. The exploit is publicly available, and this affects products no longer ...

CVE-2025-6882

Affects D-Link DIR-513 v1.0. The vulnerability resides in the /goform/formSetWanPPTP endpoint where manipulation of the curTime parameter can cause a buffer overflow, enabling remote exploitation. Several sources confirm this is a critical, network-attackable issue with potential arbitrary code e...

CVE-2025-70230

CVE-2025-70230 : A stack buffer overflow in D-Link DIR-513 v1.10 is triggered by the curTime parameter to the /goform/formSetDDNS endpoint. This is reported across multiple feeds as a vulnerability affecting DIR-513 v1.10, with the effect described as a stack buffer overflow. The CVSS summary fro...

CVE-2025-7909

The CVE-2025-7909 issue affects D-Link DIR-513 v1.0, where the Boa Webserver’s /goform/formLanSetupRouterSettings uses sprintf on the curTime argument, enabling a stack-based buffer overflow. This can be triggered remotely and the exploit has been publicly disclosed. Reports indicate the vulnerab...

CVE-2025-8159

CVE-2025-8159 affects D-Link DIR-513 (firmware 1.0). The vulnerability is in the HTTP POST Request Handler, specifically the formLanguageChange function in /goform/formLanguageChange. Manipulating the curTime argument triggers a stack-based buffer overflow, with remote exploitation possible. The ...

CVE-2025-70220

CVE-2025-70220 : A stack buffer overflow exists in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4. Affected component is the web form handling in goform/formAutoDetecWAN_wizard4; root cause described as a stack buffer overflow, with no publicly provided exploit ...

CVE-2025-8184

D-Link DIR-513 (versions up to 1.10) is affected by CVE-2025-8184. The stack-based buffer overflow occurs in the formSetWanL2TPcallback function within /goform/formSetWanL2TPtriggers of the HTTP POST Request Handler. It is remotely exploitable and has been disclosed publicly. Several sources desc...

CVE-2026-6013

The CVE-2026-6013 entry describes a buffer overflow in D-Link DIR-513 v1.10 affecting the POST Request Handler’s formSetRoute (/goform/formSetRoute). The vulnerable function mishandles the curTime argument, enabling a remote attacker to trigger a buffer overflow. Exploitation is described as publ...

CVE-2026-5024

The report concerns D-Link DIR-513 (1.10). A vulnerability in the formSetEmail function (/goform/formSetEmail) arises from manipulating the curTime argument, causing a stack-based buffer overflow. The flaw is remotely exploitable and an exploit has been published. The affected product is no longe...

CVE-2026-4555

CVE-2026-4555 affects D-Link DIR-513 devices (1.10) with the boa component. The vulnerability lies in formEasySetTimezone (/goform/formEasySetTimezone): manipulating curTime triggers a stack-based buffer overflow. The issue is exploitable remotely, and the public exploit exists. Reports indicate ...

CVE-2025-70218

CVE-2025-70218 affects D-Link DIR-513 v1.10. A stack buffer overflow exists in the goform/formAdvFirewall component when processing POST data. Several connected sources corroborate the same vulnerability description and impact: potential arbitrary code execution or denial of service. Public explo...

CVE-2025-70222

CVE-2025-70222 affects D-Link DIR-513 v1.10. A stack buffer overflow is triggered via the curTime parameter in the /goform/formLogin and /goform/getAuthCode endpoints. The vulnerability is characterized as a network-accessible issue with high impact to confidentiality, integrity, and availability...

CVE-2025-70242

CVE-2025-70242 describes a stack buffer overflow in the D-Link DIR-513 v1.10 caused by the webPage parameter to goform/formSetWanPPTP. The Connected documents are not provided, so details on exploitation, impact, affected subcomponents, or remediation are not available within the given materials....

CVE-2026-4465

CVE-2026-4465 affects D-Link DIR-513 v1.10. The vulnerability is in an unknown function in /goform/formSysCmd, where manipulating the sysCmd argument can trigger an os command injection. The attack can be launched remotely, and the exploit has been published; the affected products are no longer m...

CVE-2025-70231

Summary: CVE-2025-70231 affects D-Link DIR-513 v1.10, where processing POST requests to /goform/formLogin enters /goform/getAuthCode and fails to filter the FILECODE parameter, causing a path-traversal vulnerability with high impact. The CVSSv3.1 base score is 9.8 (CRITICAL), with network access,...

CVE-2025-70232

CVE-2025-70232 describes a stack buffer overflow in the D-Link DIR-513 hardware, version 1.10, triggered by the curTime parameter in the endpoint goform/formSetMACFilter . Affected component is a web endpoint handling MAC filtering; root cause is a stack buffer overflow. The public documents cons...

CVE-2025-70233

D-Link DIR-513 v1.10 is affected by a stack buffer overflow in the curTime parameter of the /goform/formSetEnableWizard endpoint. The CVE-2025-70233 entry identifies the root cause as a stack-based overflow in this API, with a high/severity impact (CVSS v3.1: Critical, Confidentiality/Integrity/A...

CVE-2026-6012

The CVE-2026-6012 entry affects D-Link DIR-513 (firmware 1.10). It targets the POST Request Handler’s /goform/formSetPassword function, where manipulating the curTime argument causes a buffer overflow. Remote exploitation is possible and the exploit has been publicly disclosed. Affected devices a...

CVE-2025-70240

D-Link DIR-513 v1.10 is affected by a stack buffer overflow in the curTime parameter of goform/formSetWAN_Wizard51. The CNVD entry states the input length is not properly validated, enabling an attacker to cause arbitrary code execution or a denial of service on the device. The CVE description fr...

CVE-2025-70241

CVE-2025-70241 is a stack buffer overflow in D-Link DIR-513 v1.10 exploitable via the curTime parameter to goform/formSetWANType_Wizard5. Public details identify an impacted device and vulnerable component, with network-based access and no user interaction required, and a high to critical impact ...

CVE-2025-70246

The CVE concerns D-Link DIR-513 (v1.10) with a stack buffer overflow in the curTime parameter to goform/formVirtualServ. This is the specific vulnerable component/parameter and the root cause is a stack buffer overflow. The description notes the affected device and function but does not provide e...

CVE-2025-70247

CVE-2025-70247 describes a stack buffer overflow in D-Link DIR-513 v1.10 triggered via the curTime parameter to goform/formSetWizard1. The description identifies the affected product and the vulnerable parameter path, but does not provide additional details on root cause, impact, exploitation sta...

CVE-2026-6014

CVE-2026-6014 affects D-Link DIR-513 devices (firmware 1.10) in the POST Request Handler’s formAdvanceSetup (/goform/formAdvanceSetup). The issue arises from manipulating the argument webpage, causing a buffer overflow. This can be exploited remotely and the exploit has been published. The adviso...

CVE-2025-70225

CVE-2025-70225 describes a stack buffer overflow in D-Link DIR-513 v1.10 exploitable via the curtime parameter to the goform/formEasySetupWWConfig component. Affected product/line: D-Link DIR-513 (firmware v1.10). The root cause is a flawed handling of the curtime value in the Easy Setup WWConfig...

CVE-2025-70237

CVE-2025-70237 affects D-Link DIR-513 (v1.10). The issue is a stack buffer overflow in the handling of the curTime parameter passed to goform/formSetPortTr, allowing potential control-flow disruption. Multiple sources describe this vulnerability as enabling arbitrary code execution or a denial of...

CVE-2025-70244

Technical details beyond the brief description are not provided in the connected documents. Monitor for updates.

CVE-2025-70245

CVE-2025-70245 affects D-Link DIR-513 v1.10, vulnerable via the curTime parameter to goform/formSetWizardSelectMode, causing a stack-based buffer overflow. The connected sources consistently describe this as a stack buffer overflow in the specified device/firmware context; no explicit exploit det...

CVE-2025-70249

CVE-2025-70249 affects D-Link DIR-513 v1.10. The issue is a stack buffer overflow in the /goform/formSetWizard2 endpoint triggered by the curTime parameter. According to connected reports, the vulnerability has a HIGH impact on availability with no confidentiality or integrity impact, and affects...

CVE-2025-70250

CVE-2025-70250 describes a stack-buffer-overflow in D‑Link DIR‑513 v1.10 triggered by the curTime parameter in the /goform/formdumpeasysetup endpoint. Multiple sources (Red Hat, ENISA EUVD, NVD, OSV, CIRCL, CVE listing) confirm the vulnerability in this specific device/firmware. The issue is loca...

CVE-2025-70221

CVE-2025-70221 affects D-Link DIR-513 v1.10. The vulnerability is a stack buffer overflow in the goform/formLogin path triggered by the curTime parameter. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no user interaction, and with high impact to confidentiality, integrity, and ...

CVE-2025-70238

CVE-2025-70238 affects D-Link DIR-513 v1.10. The issue is a stack buffer overflow triggered by the curTime parameter in the /goform/formSetWAN_Wizard52 endpoint. Root cause: improper handling of input in that endpoint leads to a stack-based overflow. Impact per sources is a high-severity vulnerab...

CVE-2025-70219

CVE-2025-70219 affects D-Link DIR-513 v1.10, with a stack buffer overflow in the web interface through the goform/formDeviceReboot. The issue targets a network-accessible component (web form) and is described as a high-severity impact affecting confidentiality, integrity, and availability. The pr...

CVE-2025-70227

CVE-2025-70227 affects D-Link DIR-513 v1.10. The vulnerability is a stack buffer overflow triggered by the nextPage parameter to the formLanguageChange endpoint (goform/formLanguageChange). The description indicates an overflow in this parameter handling, but the Connected Documents provide no fu...

CVE-2025-70251

CVE-2025-70251 describes a stack buffer overflow in the D-Link DIR-513 v1.10, triggered via the webPage parameter to goform/formWlanGuestSetup. Affected software/hardware: D-Link DIR-513 (v1.10). The description does not provide impact details beyond the overflow risk, nor remediation steps. No e...

CVE-2026-3978

CVE-2026-3978 affects D-Link DIR-513 running 1.10. The issue is in an unknown function of the file /goform/formEasySetupWizard3, where manipulation of the wan_connected argument causes a stack-based buffer overflow. It supports remote exploitation and has a publicly available exploit. Multiple co...

CVE-2025-70236

CVE-2025-70236 affects D-Link DIR-513 v1.10. A stack buffer overflow exists in goform/formSetDomainFilter, triggered by the curTime parameter when input length validation fails. Multiple connected sources (CNVD, Red Hat, OSV, CVE lists) describe potential arbitrary code execution or denial of ser...

CVE-2025-70243

CVE-2025-70243 describes a stack buffer overflow in the D-Link DIR-513 device (v1.10) triggered by the curTime parameter to the endpoint goform/formSetWAN_Wizard534. The CVSS v3.1 vector indicates NETWORK attack vector, LOW attack complexity, no privileges required, and availability impact HIGH (...

CVE-2025-70234

CVE-2025-70234 concerns a stack buffer overflow in D-Link DIR-513 v1.10, triggered by the curTime parameter in the endpoint goform/formSetQoS. CNVD-2026-16146 and RH/OSV entries describe potential arbitrary code execution or denial of service due to improper input length validation of the curTime...