308 matches found
CVE-2024-10914
cve-2024-10914 cve-2024-10914 के लिए शोषण: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 कमांड इंजेक्शन...
CVE-2024-10914
CVE-2024-10914 - استغلال تنفيذ الكود عن بُعد RCE لأجهزة D-Link هذا السكربت هو اختبار إثبات المفهوم PoC لاستغلال CVE-2024-10914، وهي ثغرة تنفيذ كود عن بُعد في بعض أجهزة D-Link. يقوم السكربت بتحديد الأجهزة المعرضة للخطر واستغلالها لتنفيذ أوامر عشوائية. ملاحظة: يجب استخدام هذا السكربت للأغراض...
D-Link DNS-320 - Remote Code Execution
The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...
CVE-2024-10914
CVE-2024-10914 - D-Link रिमोट कोड निष्पादन RCE शोषण यह स्क्रिप्ट CVE-2024-10914 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट PoC शोषण है, जो कुछ D-Link उपकरणों में एक रिमोट कोड निष्पादन कमजोरी है। यह स्क्रिप्ट कमजोर उपकरणों की पहचान करती है और उनका शोषण करके मनमाना कमांड निष्पादित करती है। नोट: इस स्क्रिप्ट का...
Best-Practices-Cybersecurity-Otanata-Project
CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — अधिकृत प्रवेश परीक्षण रिपोर्ट D-Link DNS-320L NAS | ग्राहक: Otonata अवलोकन यह रिपॉजिटरी एक अधिकृत प्रवेश परीक्षण के लिए पूर्ण सुरक्षा मूल्यांकन रिपोर्ट शामिल करता है, जो ग्राहक Otonata श्री Johnny Yap के लिए D-Link DNS-320L NAS उपकरण...
CVE-2024-10914
CVE-2024-10914 D-Link DNS-320, DNS-320LW, DNS-325 और DNS-340L 20241028 तक में एक कमजोरी पाई गई है। इसे क्रिटिकल घोषित किया गया है। यह कमजोरी /cgi-bin/accountmgr.cgi?cmd=cgiuseradd फ़ाइल में cgiuseradd फ़ंक्शन को प्रभावित करती है। आर्गुमेंट name के हेरफेर से OS कमांड इंजेक्शन होता है। हमला दूरस्थ...
CVE-2024-10914-Exploit
CVE-2024-10914-استغلال CVE-2024-10914 هي ثغرة أمنية حرجة تؤثر على أجهزة D-Link DNS-320، DNS-320LW، DNS-325، وDNS-340L حتى الإصدار 20241028. الوظيفة cgiuseradd في الملف /cgi-bin/accountmgr.cgi?cmd=cgiuseradd هي المسؤولة، مما يسمح للمهاجمين بحقن أوامر نظام التشغيل عن بُعد. استخدام السكريبت:...
D-Link-NAS-CVE-2024-10914-
D-Link-NAS-CVE-2024-10914- यह एक D-Link rce भेद्यता जांच प्रोग्राम है भेद्यता परिचय D-Link DNS-320 आदि चीनी कंपनी D-Link द्वारा बनाए गए NAS नेटवर्क अटैच्ड स्टोरेज उपकरण हैं। D-Link के कई उत्पादों में सुरक्षा भेद्यता पाई गई है, जो पैरामीटर name के गलत संचालन के कारण ऑपरेटिंग सिस्टम कमांड इंजेक्शन ...
CVE-2024-10914-EXPLOIT
CVE-2024-10914 - D-Link Remote Code Execution RCE This repo contains a proof-of-concept PoC exploit for a critical vulnerability affecting D-Link NAS devices. The bug, tracked as CVE-2024-10914 , impacts the following models: D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325 D-Link DNS-340L The...
The vulnerability of the /cgi/file_sharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software allows a hacker to execute arbitrary commands.
The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...
The vulnerability in the script/cgi-bin/dropbox.cgi of the CGI Handler component of the D-Link DNS-340L network storage software allows a hacker to execute arbitrary code.
The vulnerability of the /cgi-bin/dropbox.cgi script of the CGI Handler component in the D-Link DNS-340L network storage software is related to the lack of measures taken at the administrative level to ensure data cleanup. Exploiting this vulnerability could allow an attacker operating remotely t...
EUVD-2026-70768
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...
EUVD-2026-70766
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...
CVE-2026-85223
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...
CVE-2026-85224
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...
CVE-2026-85224 D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...
CVE-2026-85224 D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection
A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...
CVE-2026-85224
CVE-2026-85224 is an OS command injection vulnerability in the File Sharing component of D-Link DNS-320 ShareCenter (firmware 2.06B01), specifically in /cgi/file_sharing.cgi. Manipulation of the fileurl argument allows a remote attacker to execute arbitrary commands. The CVSS 3.1 score is 9.1 (CR...
CVE-2026-85222
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addoncenter.cgi of the component Add-On Center. Such manipulation of the argument fname/furl/fflag/floginuser leads to os command injection. It is possible to...
CVE-2026-85223 D-Link DNS-340L CGI dropbox.cgi os command injection
A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...