CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

CVE-2023-27216

CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

CVE-2018-8941

CVE-2018-8941: D-Link DSL-3782 Code execution Proof of Concept Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys The buffer overflow vulnerability was found in the "/userfs/bin/tcapi" binary which is used as a wrapper for the "Diagnostics"...

CVE-2021-46108

CVE-2021-46108 ██╗ ██╗███████╗███████╗ ╚██╗██╔╝██╔════╝██╔════╝ ╚███╔╝ ███████╗███████╗ ██╔██╗ ╚════██║╚════██║ ██╔╝ ██╗███████║███████║ ╚═╝ ╚═╝╚══════╝╚══════╝ D-Link Router DSL-2730E - Stored Cross Site Scripting D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the...

D-Link DSL-3782 Component Data Compromise

The vulnerability of the /cgi-bin/NewGUI/Set/Diagnostics.asp function of the Diagnostics component of D-Link DSL-3782 router microprogramming software is related to the lack of data cleaning measures at the management level when processing the Addr parameter. Exploiting this vulnerability allows ...

D-Link DSL-2740R Wireless Setup Component XSS

The vulnerability of the Wireless Setup Section component in D-Link DSL-2740R microprogramming software is related to the lack of measures taken to protect the website structure when processing the Wireless Network Name parameter. Exploiting this vulnerability allows a remote attacker to perform...

CVE-2026-90880

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

EUVD-2026-78270

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

CVE-2026-90880 D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

CVE-2026-90880

A command injection vulnerability affects the D-Link DSL-3782 (firmware 2016-07-28 ). The flaw resides in the system function of the file /cgi-bin/New_GUI/Set/Diagnostics.asp within the Diagnostics component. Manipulating the Addr argument allows an attacker to inject and execute arbitrary comman...

CVE-2026-90880 D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

CVE-2026-90880: Improper Neutralization of Special Elements used in a Command

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

PT-2026-91242

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/New GUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotel...

D-Link DSL-2780B & DSL-2730B & DSL-526B DNS Change

Module exploits D-Link DSL-2780B, DSL-2730B and DSL-526B dns change vulnerability. If the target is vulnerable it is possible to change dns settings. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2780B & DSL-2730B & DSL-526B DNS Change""" import re from kittysploit import from...

D-Link DSL-2750B Info Disclosure

Module explois information disclosure vulnerability in D-Link DSL-2750B devices. It is possible to retrieve sensitive information such as SSID, Wi-Fi password, PIN code. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2750B Info Disclosure""" import re from kittysploit import from...

D-Link DSL-2640B DNS Change

Module exploits D-Link DSL-2640B dns change vulnerability. If the target is vulnerable it is possible to change dns settings. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2640B DNS Change""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

D-Link DSL-2740R DNS Change

Module exploits D-Link DSL-2740R dns change vulnerability. If the target is vulnerable it is possible to change dns settings. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2740R DNS Change""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

D-Link DSL-2750B RCE

Module exploits remote code execution vulnerability in D-Link DSL-2750B devices. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2750B RCE""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.exploit.handler import Handler class ModuleExploit,...

D-Link DSL-2730U/2750U/2750E Path Traversal

Module exploits D-Link DSL-2730U/2750U/2750E Path Traversal vulnerability which allows to read any file on the system. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DSL-2730U/2750U/2750E Path Traversal""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient...