8.7

CVSS4.0

CVE-2025-13553 - D-Link DWR-M920 formPinManageSetup sub_41C7FC buffer overflow

A weakness has been identified in D-Link DWR-M920 1.1.50. This affects the function sub_41C7FC of the file /boafrm/formPinManageSetup. This manipulation of the argument submit-url causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the publ…

πŸ“… Published: Nov. 23, 2025, 2:02 p.m. πŸ”„ Last Modified: Nov. 23, 2025, 2:02 p.m.

8.7

CVSS4.0

CVE-2025-13552 - D-Link DIR-822K/DWR-M920 formWlEncrypt buffer overflow

A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The impacted element is an unknown function of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit…

πŸ“… Published: Nov. 23, 2025, 1:32 p.m. πŸ”„ Last Modified: Nov. 23, 2025, 1:32 p.m.

8.7

CVSS4.0

CVE-2025-13551 - D-Link DIR-822K/DWR-M920 formWanConfigSetup buffer overflow

A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. The affected element is an unknown function of the file /boafrm/formWanConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. The attack is possible to be carried out remotely. The…

πŸ“… Published: Nov. 23, 2025, 1:02 p.m. πŸ”„ Last Modified: Nov. 23, 2025, 1:02 p.m.

8.7

CVSS4.0

CVE-2025-13550 - D-Link DIR-822K/DWR-M920 formVpnConfigSetup buffer overflow

A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Impacted is an unknown function of the file /boafrm/formVpnConfigSetup. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack can be executed remotely. The exploit has been…

πŸ“… Published: Nov. 23, 2025, 12:32 p.m. πŸ”„ Last Modified: Nov. 23, 2025, 12:32 p.m.

8.7

CVSS4.0

CVE-2025-13549 - D-Link DIR-822K formNtp sub_455524 buffer overflow

A vulnerability was found in D-Link DIR-822K 1.00. This issue affects the function sub_455524 of the file /boafrm/formNtp. Performing manipulation of the argument submit-url results in buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

πŸ“… Published: Nov. 23, 2025, 12:02 p.m. πŸ”„ Last Modified: Nov. 23, 2025, 12:02 p.m.

8.7

CVSS4.0

CVE-2025-13548 - D-Link DIR-822K/DWR-M920 formFirewallAdv buffer overflow

A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This vulnerability affects unknown code of the file /boafrm/formFirewallAdv. Such manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been di…

πŸ“… Published: Nov. 23, 2025, 11:32 a.m. πŸ”„ Last Modified: Nov. 23, 2025, 11:32 a.m.

8.7

CVSS4.0

CVE-2025-13547 - D-Link DIR-822K/DWR-M920 formDdns memory corruption

A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. This affects an unknown part of the file /boafrm/formDdns. This manipulation of the argument submit-url causes memory corruption. The attack may be initiated remotely. The exploit has been published and may be used.

πŸ“… Published: Nov. 23, 2025, 11:02 a.m. πŸ”„ Last Modified: Nov. 23, 2025, 11:02 a.m.

5.3

CVSS4.0

CVE-2025-13546 - ashraf-kabir travel-agency Search results.php sql injection

A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this issue is some unknown functionality of the file /results.php of the component Search. The manipulation of the argument user_query results in sql injection. The attack can be l…

πŸ“… Published: Nov. 23, 2025, 10:32 a.m. πŸ”„ Last Modified: Nov. 23, 2025, 10:32 a.m.

5.1

CVSS4.0

CVE-2025-13545 - ashraf-kabir travel-agency index.php sql injection

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this vulnerability is an unknown functionality of the file /admin_area/index.php. The manipulation of the argument edit_pack leads to sql injection. The attack can be…

πŸ“… Published: Nov. 23, 2025, 10:02 a.m. πŸ”„ Last Modified: Nov. 23, 2025, 10:02 a.m.

5.3

CVSS4.0

CVE-2025-13544 - ashraf-kabir travel-agency customer_register.php unrestricted upload

A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function of the file /customer_register.php. Executing manipulation can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been…

πŸ“… Published: Nov. 23, 2025, 9:02 a.m. πŸ”„ Last Modified: Nov. 23, 2025, 9:02 a.m.
Total resulsts: 319146
Page 1 of 31,915
Β» next page
Filters