CVE-2025-4903

A vulnerability, which was classified as critical, was found in D-Link DI-7003GV2 24.04.18D1 R(68125). This affects the function sub_41F4F0 of the file /H5/webgl.asp?tggl_port=0&remote_management=0&http_passwd=game&exec_service=admin-restart. The manipulation leads to unverified password change. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-620
• CWE-640
• CWE-620

• https://github.com/at0de/my_vulns/blob/main/Dlink/Di-7003GV2/webgl_asp.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.309459Permissions Required, VDB Entry
• https://vuldb.com/?id.309459Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.578051Third Party Advisory, VDB Entry
• https://www.dlink.com/Product

Published

May 19, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-49013WilderForge is a Wildermyth coremodding API. A critical vuln…9.9
• CVE-2025-49014jq is a command-line JSON processor. In version 1.8.0 a heap…5.5
• CVE-2025-49015The Couchbase .NET SDK (client library) before 3.7.1 does no…4.9
• CVE-2025-4902A vulnerability, which was classified as problematic, has be…7.5
• CVE-2025-49028Cross-Site Request Forgery (CSRF) vulnerability in Zoho Mail…7.1
• CVE-2025-49029Improper Control of Generation of Code ('Code Injection') vu…9.1
• CVE-2025-49031Improper Neutralization of Input During Web Page Generation …7.1
• CVE-2025-49032Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2025-49033Improper Neutralization of Special Elements used in an SQL C…8.5
• CVE-2025-49034Improper Neutralization of Special Elements used in an SQL C…7.6
• CVE-2025-49035Improper Neutralization of Input During Web Page Generation …5.9
• CVE-2025-49036Improper Control of Filename for Include/Require Statement i…8.1