Vulnerabilidades de Dlink

CVE-2025-70230 Crítica · 9.8 CWE-121 05/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDDNS.

CVE-2025-70229 Crítica · 9.8 CWE-121 05/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSchedule.

CVE-2025-70222 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode.

CVE-2025-70225 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curtime parameter to the goform/formEasySetupWWConfig component

CVE-2025-70221 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin.

CVE-2025-46108 Crítica · 9.8 CWE-120 04/03/2026

Classic Buffer Overflow em Dlink Dir-513 Firmware

D-link Dir-513 A1FW110 is vulnerable to Buffer Overflow in the function formTcpipSetup.

CVE-2025-70219 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the goform/formDeviceReboot.

CVE-2025-70226 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formEasySetupWizard.

CVE-2025-70223 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork.

CVE-2025-70220 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAutoDetecWAN_wizard4.

CVE-2025-70218 Crítica · 9.8 CWE-121 04/03/2026

Stack-based Buffer Overflow em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via POST to the goform/formAdvFirewall component.

CVE-2026-3485 Crítica · 9.8 CWE-78 03/03/2026

D-Link DIR-868L SSDP Service sub_1BF84 os command injection

A flaw has been found in D-Link DIR-868L 110b03. This affects the function sub_1BF84 of the component SSDP Service. This manipulation of the argument ST causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-70240 Crítica · 9.8 CWE-787 03/03/2026

Out-of-bounds Write em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard51.

CVE-2025-70239 Crítica · 9.8 CWE-787 03/03/2026

Out-of-bounds Write em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWAN_Wizard55.

CVE-2025-70234 Crítica · 9.8 CWE-787 03/03/2026

Out-of-bounds Write em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetQoS.

CVE-2025-70241 Crítica · 9.8 CWE-787 03/03/2026

Out-of-bounds Write em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetWANType_Wizard5.

CVE-2025-70237 Crítica · 9.8 CWE-787 03/03/2026

Out-of-bounds Write em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetPortTr.

CVE-2025-70236 Crítica · 9.8 CWE-787 03/03/2026

Out-of-bounds Write em Dlink Dir-513 Firmware

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formSetDomainFilter.

CVE-2026-2962 Alta · 8.8 CWE-119 22/02/2026

D-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub_460F30 stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07. This vulnerability affects the function sub_460F30 of the file /boafrm/formDateReboot of the component Scheduled Reboot Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

CVE-2026-2961 Alta · 8.8 CWE-119 22/02/2026

D-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflow

A vulnerability has been found in D-Link DWR-M960 1.01.07. This affects the function sub_4196C4 of the file /boafrm/formVpnConfigSetup of the component VPN Configuration Endpoint. The manipulation of the argument submit-url leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-2960 Alta · 8.8 CWE-119 22/02/2026

D-Link DWR-M960 formDhcpv6s sub_468D64 stack-based overflow

A flaw has been found in D-Link DWR-M960 1.01.07. Affected by this issue is the function sub_468D64 of the file /boafrm/formDhcpv6s. Executing a manipulation of the argument submit-url can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

CVE-2026-2959 Alta · 8.8 CWE-119 22/02/2026

D-Link DWR-M960 formNewSchedule sub_44E0F8 stack-based overflow

A vulnerability was detected in D-Link DWR-M960 1.01.07. Affected by this vulnerability is the function sub_44E0F8 of the file /boafrm/formNewSchedule. Performing a manipulation of the argument url results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVE-2026-2958 Alta · 8.8 CWE-119 22/02/2026

D-Link DWR-M960 formWsc sub_457C5C stack-based overflow

A security vulnerability has been detected in D-Link DWR-M960 1.01.07. Affected is the function sub_457C5C of the file /boafrm/formWsc. Such manipulation of the argument save_apply leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-2929 Alta · 8.8 CWE-119 22/02/2026

D-Link DWR-M960 Wireless Access Control Endpoint formWlAc sub_453140 stack-based overflow

A vulnerability was determined in D-Link DWR-M960 1.01.07. Impacted is the function sub_453140 of the file /boafrm/formWlAc of the component Wireless Access Control Endpoint. This manipulation of the argument submit-url causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

CVE-2026-2928 Alta · 8.8 CWE-119 22/02/2026

D-Link DWR-M960 WLAN Encryption Configuration Endpoint formWlEncrypt sub_452CCC stack-based overflow

A vulnerability was found in D-Link DWR-M960 1.01.07. This issue affects the function sub_452CCC of the file /boafrm/formWlEncrypt of the component WLAN Encryption Configuration Endpoint. The manipulation of the argument submit-url results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used.