Xray

**Name of the Vulnerable Software and Affected Versions** D-Link DI-8400 version 16.07 **Description** A flaw in the Web Administration Service allows for a remote stack-based buffer overflow. This occurs when the `opt` argument is manipulated within the `menu nat more asp()` function of the `menu nat more.asp` file. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the Web Administration Service to minimize the risk of exploitation.

A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn functions.php?action=add. Performing a manipulation of the argument difficulty id results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

**Name of the Vulnerable Software and Affected Versions** D-Link DI-8400 version 16.07 **Description** A security flaw in the DDNS Configuration component allows for a remote attack. A stack-based buffer overflow occurs when manipulating the `serv`, `user`, `host`, `wild`, `mx`, `bmx`, `cust`, or `ip` arguments within the `ddns asp()` function of the '/ddns.asp' endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/ddns.asp' endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** D-Link DI-8300 version 16.07 **Description** A flaw in the CGI Service component allows remote exploitation via a stack-based buffer overflow. This occurs when the `redirct url` argument is manipulated within the `rzgl asp()` function of the '/rzgl.asp' endpoint. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/rzgl.asp' endpoint to minimize the risk of exploitation.