PT-2018-9684 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 REV. B versions through DIR-815 REVB FIRMWARE PATCH 2.07.B01 Description: The issue concerns a problem with the Treturn parameter in the /htdocs/webinc/js/bsc sms inbox.php API endpoint, which can be exploited. Recommendations:...

CVE-2015-0151

Cross-site request forgery CSRF vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

PT-2018-4330 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 devices with firmware prior to 2.07.B01 Description: A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that insert XSS sequences. Recommendations: For D-Link DIR-815 devices...

PT-2018-4332 · D Link · Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue allows remote attackers to obtain sensitive information. This is achieved by leveraging cleartext storage of the wireless key. Recommendations: For versions prior to 2.07.B01,...

PT-2018-4329 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue concerns the remote administration UI, allowing remote attackers to bypass intended access restrictions. Recommendations: For versions prior to 2.07.B01, update the firmware to...

CVE-2017-3193

Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service...

PT-2017-15703 · D Link · Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L firmware versions 1.14B07 and 2.07.B05 Description: A stack-based buffer overflow issue exists in the web administration interface HNAP service of the affected devices. Recommendations: For firmware version 1.14B07, update to ...

Buffalo BBR-4HG and BBR-4MG Cross-Site Scripting Vulnerabilities

The Buffalo BBR-4HG and BBR-4MG are both broadband router products from the Buffalo Group of Japan. A cross-site scripting vulnerability exists in the Buffalo BBR-4HG and BBR-4MG broadband routers using firmware versions 1.00 through 1.48 and 2.00 through 2.07. A remote attacker could exploit thi...

Input validation

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

Stack Buffer Overflow Vulnerability in Multiple D-Link Products

The D-Link DIR-850L is a wireless router from AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-850L using firmware versions 1.14B07 and 2.07.B05. An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected device, resulting in a...

PCMan FTP Server 2.0.7 - PUT Remote Buffer Overflow

PCMan FTP Server 2.0.7 - PUT Remote Buffer Overflow !/usr/bin/python title: PCMan FTP Server v2.0.7 Buffer Overflow - PUT Command author: @shipcod3 Jay Turla nc 9988 Tested on Windows XP Service Pack 3 - English description: Buffer overflow is triggered upon sending long string using the command...

CMS Builder 2.07 SQL Injection

Affected software: CMS Builder v2.07 Type of vulnerability: sql injection URL: http://demo2.interactivetools.com/cmsbuilder2/bottom.php Discovered by: Provensec Website: http://www.provensec.com versionv2.07 Proof of concept...

Fedora 20 : pwgen-2.07-1.fc20 (2014-16368)

Update to 2.07 bug 1159526 fixes : - CVE-2013-4440 bug 1020222, 1020223 - CVE-2013-4442 bug 1020259, 1020261 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

PCMAN FTP 2.07 PORT 命令 缓冲区溢出漏洞（0day）

No description provided by source. Exploit Title: PCMAN FTP 2.07 PORT Command Buffer Overflow Exploit Date: 07 13,2014 Exploit Author: niubl Version: 2.07 Tested on: Windows xp sp3 chinese Email: [email protected] thank for Mahmod Mahajna. i learn from him. 漏洞太多了这个版本软件 import socket as s from sys...

PCMAN FTP 2.07 CWD Command - Buffer Overflow Exploit

No description provided by source. Exploit Title: PCMAN FTP 2.07 CWD Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: [email protected] import socket as s from sys import argv iflenargv != 4: print USAGE: %s...

PCMAN FTP 2.07 STOR Command - Buffer Overflow Exploit

No description provided by source. !/usr/bin/python Exploit Title: PCMAN FTP 2.07 STOR Command - buffer overflow Date: 18 Agosto 2013 Exploit Author: Christian Polunchis Ramirez https://intrusionlabs.org Contact: [email protected] Version: PCMAN FTP 2.07 STOR Command Tested on: Windows ...

acme thttpd 2.0.7 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10862/info It is reported that thttpd is susceptible to a directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue only exists in the Windows port of...

PCMAN FTP 2.07 - Buffer Overflow Exploit

No description provided by source. Exploit Title: PCMAN FTP 2.07 Long Command Buffer Overflow unauthenticated Date: Feb 19, 2014 Exploit Author: Sumit Version: 2.07 Tested on: Windows XP Professional SP3 Description: Buffer overflow is triggered upon sending long string to PCMAN FTP 2.07 in place...

IntelliTamper 2.07 - (.map file) Local Arbitrary Code Execution Exploit

No description provided by source...

PCMAN FTP 2.07 ABOR Command - Buffer Overflow Exploit

Exploit for windows platform in category remote exploits Exploit Title: PCMAN FTP 2.07 ABOR Command Buffer Overflow Date: Jan 25,2014 Exploit Author: Mahmod Mahajna Mahy Version: 2.07 Tested on: Windows 7 sp1 x64 english Email: email protected import socket as s from sys import argv iflenargv != ...