https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 07:24:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-09435 bdu:2025-09435 https://cve.radiocsirt.org/vuln/bdu:2025-09435 https://cve.radiocsirt.org/vuln/cnvd-2025-18479 cnvd-2025-18479 https://cve.radiocsirt.org/vuln/cnvd-2025-18479 https://cve.radiocsirt.org/vuln/euvd-2026-318221 EUVD-2026-318221 https://cve.radiocsirt.org/vuln/euvd-2026-318221 https://cve.radiocsirt.org/vuln/fkie_cve-2012-10021 <p>A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function. The flaw arises from unsafe usage of sprintf() when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogin. A remote unauthenticated attacker can exploit this to execute arbitrary code with root privileges on the device.</p> <p>A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function. The flaw arises from unsafe usage of sprintf() when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogin. A remote unauthenticated attacker can exploit this to execute arbitrary code with root privileges on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2012-10021 https://cve.radiocsirt.org/vuln/ghsa-g2h4-mw8p-v523 <p>A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function. The flaw arises from unsafe usage of sprintf() when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogin. A remote unauthenticated attacker can exploit this to execute arbitrary code with root privileges on the device.</p> <p>A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function. The flaw arises from unsafe usage of sprintf() when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogin. A remote unauthenticated attacker can exploit this to execute arbitrary code with root privileges on the device.</p> https://cve.radiocsirt.org/vuln/ghsa-g2h4-mw8p-v523