CVE-2020-25078

Vulnerabilità di divulgazione di credenziali nella serie D-Link DCS Vulnerabilità di divulgazione di credenziali nella serie D-Link DCS, che consente di ottenere account e password tramite uno script per l'accesso. Codice della vulnerabilità CVE-2020-25078 Utilizzo dello strumento python3...

CVE-2013-1602: Exposure of Sensitive Information to an Unauthorized Actor

An Information Disclosure vulnerability exists due to insufficient validation of authentication cookies for the RTSP session in D-Link DCS-5635 1.01, DCS-1100L 1.04, DCS-1130L 1.04, DCS-1100 1.03/1.04US, DCS-1130 1.03/1.04US , DCS-2102 1.05RU/1.06/1.06FR/1.05TESCO, DCS-2121...

PT-2019-3088

Name of the Vulnerable Software and Affected Versions D-Link DCS series versions 1.08.11 and below DCS-5009L D-Link DCS series versions 1.14.09 and below DCS-5010L D-Link DCS series versions 1.15.12 and below DCS-5020L D-Link DCS series versions 1.03.07 and below DCS-5025L D-Link DCS series...

CVE-2019-10999: Out-of-bounds Write

The D-Link DCS series of Wi-Fi cameras contains a stack-based buffer overflow in alphapd, the camera's web server. The overflow allows a remotely authenticated attacker to execute arbitrary code by providing a long string in the WEPEncryption parameter when requesting wireless.htm. Vulnerable...

CVE-2018-18441: Exposure of Sensitive Information to an Unauthorized Actor

D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many mor...

CVE-2017-7852: Cross-Site Request Forgery (CSRF)

D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the 'allow-access-from domain' child element set to , thus accepting requests from any domain. If a...