at0de

5 exploits Active since May 2025
CVE-2025-4750 WRITEUP MEDIUM WRITEUP
D-Link DI-7003GV2 24.04.18D1 R(68125) - Information Disclosure in Configuration Handler
A vulnerability, which was classified as problematic, has been found in D-Link DI-7003GV2 24.04.18D1 R(68125). This issue affects some unknown processing of the file /H5/get_version.data of the component Configuration Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS 5.3
CVE-2025-4752 WRITEUP MEDIUM WRITEUP
D-Link DI-7003GV2 24.04.18D1 R(68125) - Information Disclosure via /install_base.data
A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /install_base.data. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS 5.3
CVE-2025-4755 WRITEUP HIGH WRITEUP
D-Link DI-7003GV2 24.04.18D1 R(68125) - Improper Authentication in netconfig.asp
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been classified as critical. This affects the function sub_497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS 7.3
CVE-2025-4903 WRITEUP MEDIUM WRITEUP
D-Link DI-7003GV2 24.04.18D1 R(68125) - Unauthenticated Unverified Password Change via webgl.asp
A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This affects the function sub_41F4F0 of the file /H5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restart. The manipulation leads to unverified password change. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS 5.3
CVE-2025-4980 WRITEUP MEDIUM WRITEUP
Netgear DGND3700 1.1.00.15_1.00.15NA - Information Disclosure via currentsetting.htm
A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component mini_http. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
CVSS 5.3