1529 matches found
CVE-2022-43109
D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via a crafted packet...
The vulnerability of the D-Link DSL-2750B router’s microprogramming software lies in the lack of measures taken to clean data at the control level, allowing attackers to execute arbitrary commands.
The vulnerability of the D-Link DSL-2750B router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands through the login.cgi parameter...
The vulnerability of the setRepeaterSecurity function in D-Link DIR-816 A2 router software allows a hacker to execute arbitrary code.
The vulnerability of the setRepeaterSecurity function in D-Link DIR-816 A2 router software is related to the output of the operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the pskValue parameter...
The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the SetNetworkTomographySettings function in D-Link COVR 1200,1202,1203 router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands throug...
CVE-2022-43184
D-Link DIR878 1.30B08 Hotfix04 was discovered to contain a command injection vulnerability via the component /bin/proc.cgi...
The vulnerability of the HNAP1 protocol implementation in the microprogramming-based router software of D–Link DIR-823G allows a attacker to execute arbitrary commands.
The vulnerability of the HNAP1 protocol implementation in the microprogramming-based router software of D–Link DIR-823G is related to insufficient checking of arguments transmitted in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by entering...
PT-2022-6978 · D Link · D-Link Dap-1325
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this issue. Th...
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary commands.
The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers lies in the lack of measures taken to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2022-6975 · D Link · D-Link Dap-1325
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: The issue is related to the handling of a request parameter provided to the "HNAP1 SOAP endpoint". The problem results from the lack of proper validation of a user-supplied string...
The vulnerability of the byte_4C0160 function in D-Link DSL-3782 router microprogramming software allows a hacker to enhance their privileges and execute arbitrary commands.
The vulnerability of the byte4C0160 function in D-Link DSL-3782 router microprogramming software is related to insufficient checking of arguments passed to certain CLI commands. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands...
Mirai Variant MooBot Botnet Exploiting D-Link Router Vulnerabilities
A variant of the Mirai botnet known as MooBot is co-opting vulnerable D-Link devices into an army of denial-of-service bots by taking advantage of multiple exploits. "If the devices are compromised, they will be fully controlled by attackers, who could utilize those devices to conduct further...
PT-2022-6606 · D Link · D-Link Dap-2020 +1
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 affected versions not specified D-Link DAP-2020 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link routers...
The vulnerability of the getAttrValue function in D-Link DSL-3782 router microprogramming software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.
The vulnerability of the getAttrValue function in D-Link DSL-3782 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
面向嵌入式设备的典型pwn漏洞检测与利用系统
This is a PoC exploit for various router vulnerabilities. The repository contains multiple modules for different router types, including D-Link, Huawei, Netcore, and TP-Link. Each module is designed to exploit a specific vulnerability in the corresponding router model. The modules are written in...
CVE-2022-37125
D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost...
Buffer overflow
D-link DIR-816 A2v1.10CNB04, DIR-878 DIR878FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 firmware A2v1.10CNB04.img image, which originates from a buffer overflow in its /goform/addRouting component...
The vulnerability of the Ping_addr function in D-Link DIR810LA1FW102B22 microprogrammed router software allows a hacker to execute arbitrary code. [source-iocs-preserved const=DIR810LA1_FW102B22]
The vulnerability of the Pingaddr function in D-Link DIR810LA1FW102B22 microprogrammed router software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code. source-iocs-preserved const=DIR810LA1FW102B2...
The vulnerability of the binary.soapcgi_main function in the D-LINK DIR-818LW router’s software allows a attacker to execute arbitrary code.
The vulnerability of the binary.soapcgimain function in the D-LINK DIR-818LW router’s microprogramming software is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...