CVE-2025-71384Medium· 6.7▾ TwilightPoC availableDbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 36.9 · likelihood 0 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
— → 6.7
none → medium
0.2%
Last analysed / modified upstream
1 GitHub repo (last check)
Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-34108High· 8.6Disk Pulse Enterprise 9.0.34 Login Stack Buffer Overflow
CVE-2025-46836Medium· 6.6net-tools Stack-based Buffer Overflow vulnerability
CVE-2023-4273Medium· 6.0A flaw was found in the exFAT driver of the Linux kernel
CVE-2022-2078Medium· 5.5A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.
CVE-2026-101081Critical· 9.1A security flaw has been discovered in D-Link DI-8400 16.07
CVE-2026-101074Critical· 9.8A weakness has been identified in Netcore NR289-GE 1.4.5102