20578 matches found
CVE-2024-9570_D-Link-DIR-619L-bof
CVE-2024-9570D-Link-DIR-619L-bof Exploit for CVE-2024-9570 A vulnerability was found in D-Link DIR-619L B1 2.06 and classified as critical. Affected by this issue is the function formEasySetTimezone of the file /goform/formEasySetTimezone. The manipulation of the argument curTime leads to buffer...
CVE-2025-2620-poc
CVE-2025-2620 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-2620 , a critical stack-based buffer overflow vulnerability discovered in the D-Link DAP-1620 router running firmware version 1.03. This vulnerability allows...
CVE-2024-3273
CVE-2024-3273 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2024-3273, a security vulnerability discovered in D-Link NAS devices. The vulnerability allows attackers to execute arbitrary commands on vulnerable devices. Description CVE-2024-3273 is a vulnerability in...
CVE-2023-48842
CVE-2023-48842 Source : D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi. https://drive.google.com/file/d/1y5omf2SAhNmcPqDxCSRTvJVAWwPcH/view Little upgrade : I updated the script which is now on steroids, the scrip...
CVE-2025-65731
CVE-2025-65731 CWE-1191: On-Chip Debug and Test Interface With Improper Access Control UART Root Shell Access on D-Link DIR-605L Hardware F1, Firmware V6.02CN02 Summary A critical hardware security vulnerability has been identified in the D-Link DIR-605L router, Hardware Version F1, Firmware...
CVE-2024-10914
CVE-2024-10914 Command Injection Vulnerability Testing for D-Link NASManual testing with burpsuite Dork for Finding Vulnerable Devices Use the following search dork to find potentially vulnerable D-Link NAS devices: FOFA: app="DLink-DNS-ShareCenter" && server=="lighttpd/1.4.25-devel-fb150ff"...
CVE-2024-10914
CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...
CVE-2025-22968
CVE-2025-22968 D-Link DWR-M972V Software Version 1.05SSG Unauthenticated Access Vulnerability Description Unauthenticated access in the default configuration of the D-Link DWR-M972V Software Version 1.05SSG allows an anonymous attacker to access the router and upload malicious backdoor scripts vi...
honeypot-dlink-CVE-2024-3273
honeypot-dlink-CVE-2024-3273 Quick and dirty honeypot for CVE-2024-3273. This template can be used to setup a basic honeypot in 10min. TL;DR: Find fofa, shodan, onyphe, .... Clone it with the wgetclonehttp.sh. Manual tinkering to make the honeypot more realistic cloning isn't perfect so some file...
CVE-2019-7642
CVE-2019-7642 D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW A1-1.04, DIR-816L...
CVE-2024-10914
cve-2024-10914 Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command Injection...
CVE-2025-60854
CVE-2025-60854 D-link AX1500 Vulnerability I recently conducted a vulnerability analysis on a D-Link router and would like to document my findings. Target model: D-Link AX1500 Version : 1.20.01 and below The CVE number for this issue is currently published. The vulnerable function is as follows:...
CVE-2023-27216
CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...
cve-2015-1187-dir820l-firmware-reverse-engineering
cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...
D-Link-CVE-2021-27342-exploit
D-Link-CVE-2021-27342-exploit Exploit for CVE-2021-27342 vulnerability telnet authentication brute-force protection bypass...
CVE-2024-10914
CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit This script is a proof-of-concept PoC exploit for CVE-2024-10914, a remote code execution vulnerability in certain D-Link devices. The script identifies and exploits vulnerable devices to execute arbitrary commands. Note: This script shoul...
D-Link-NAS-CVE-2024-10914-
D-Link-NAS-CVE-2024-10914- This is a D-Link RCE vulnerability detection program Vulnerability Overview D-Link DNS-320, etc., are NAS Network Attached Storage devices from D-Link China. Multiple D-Link products have a security vulnerability, which stems from erroneous operations on the parameter...
CVE-2019-16920-MassPwn3r
0day exploit for Multiple D-Link Routers Vulnerability was found in latest firmware of the following D-Link products: DIR-655 DIR-866L DIR-652 DHP-1565 Current Description Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue...
DIR-890L-1.20-RCE
D-Link DIR-890L RCE Affected Version: = v1.22B01 Hotfix latest Firmware: Here This model has reached the end of its life-cycle. The resources associated with these products have ceased their development and are no longer supported. D-Link Systems, Inc. recommends retiring these products and...
Komfy-Switch-Wifi-Password-Disclosure
Komfy-Switch-Wifi-Password-Disclosure Intro This writeup will detail my finding on D-Link's Komfy Switch with Camera to retrieve the device's associated wifi ssid and password over bluetooth 4.0 BLE. The Komfy switch is a home security and automation product that can replace a wall switch in your...