CVE-2017-6206

CVE-2017-6206 Il firmware della serie di switch Websmart DGS-1510 è risultato avere vulnerabilità di sicurezza. Le vulnerabilità includono il bypass dei comandi senza autenticazione e la divulgazione di informazioni senza autenticazione. exploit.sh contiene sia il codice PoC e creerà un utente...

The vulnerability of D-Link DGS-1510 network device’s microprogramming software lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the D-Link DGS-1510 network device’s microprogramming software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

D-Link DGS-1510 Command Injection Vulnerability

The D-Link DGS-1510 is a DGS-1510 series switch from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DGS-1510 using firmware versions 1.20.011, 1.30.007, and 1.31.B003 and earlier. A remote attacker can exploit the vulnerability to inject malicious scripts and execute...

CVE-2018-7859

A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit...

CVE-2018-7859: Improper Neutralization of Input During Web Page Generation

A security vulnerability in D-Link DGS-1510-series switches with firmware 1.20.011, 1.30.007, 1.31.B003 and older that may allow a remote attacker to inject malicious scripts in the device and execute commands via browser that is configuring the unit...

PT-2019-5689

Name of the Vulnerable Software and Affected Versions D-Link DGS-1510-series switches versions 1.20.011 through 1.31.B003 and older Description The issue is related to a lack of protection for the web page structure, which may allow a remote attacker to inject malicious scripts into the device an...

D-Link DGS-1510 - Multiple Vulnerabilities

================ get-user-info.py ================ import re import os.path import urllib2 import base64 import gzip import zlib from StringIO import StringIO from io import BytesIO def makerequests: """Calls request functions sequentially.""" response = None responseText = None...

PT-2017-16945

Name of the Vulnerable Software and Affected Versions D-Link DGS-1510 series versions prior to 1.31.B003 Description The issue allows attackers to conduct Unauthenticated Information Disclosure attacks. The exact vectors used for the attack are not specified. Recommendations For D-Link DGS-1510...

CVE-2017-6206: Exposure of Sensitive Information to an Unauthorized Actor

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Information Disclosure attacks via unspecified vectors...

PT-2017-16944

Name of the Vulnerable Software and Affected Versions D-Link DGS-1510 series versions prior to 1.31.B003 Description The issue allows attackers to conduct Unauthenticated Command Bypass attacks. The exact vectors used for the attack are not specified. Recommendations For D-Link DGS-1510 series...

CVE-2017-6205: Undefined Security Weakness

D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to conduct Unauthenticated Command Bypass attacks via unspecified vectors...