cve-2024-4577-lab

Esquema del Entorno Contenedor del Sistema Operativo: ubuntu:22.04 ejecutándose bajo Windows WSL2. Capa del Servidor Web: Apache2 con modactions, modcgi y modcgid forzados globalmente en el apache2.conf principal. Intérprete de Lenguaje: PHP 8.1.2 ejecutándose estrictamente en modo CGI/FastCGI...

TOTOLINK A7100RU Operating System Command Injection Vulnerability (CNVD-2026-32921)

The TOTOLINK A7100RU is a wireless router produced by TOTOLINK, a Chinese electronics company. The TOTOLINK A7100RU has a vulnerability related to operating system command injection. This vulnerability stems from the setTracerouteCfg function in the CGI processing component, which fails to proper...

CVE-2021-27248

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the...

CVE-2020-9276

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. The function docgi, which processes cgi requests supplied to the device's web servers, is vulnerable to a remotely exploitable stack-based buffer overflow. Unauthenticated exploitation is possible by combining this vulnerability with...