1529 matches found
CVE-2021-41442
An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09Beta allows a remote unauthenticated attacker to DoS the web application via sending a specific HTTP packet...
CVE-2021-46455
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the stationaccessenable parameter...
CVE-2021-44881
D-Link device DIR882 DIR882FW1.30B06Hotfix02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a crafted HNAP1 POST request...
D-Link DIR-878 命令注入漏洞
D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company in China. The D-Link DIR-878 is vulnerable to an operating system command injection vulnerability, which stems from the inclusion of a command injection vulnerability in a system function. An attacker could exploit the...
D-Link DIR-878 命令注入漏洞
D-Link DIR-878 is a wireless router from D-Link Taiwan, China. The D-Link DIR-878 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...
D-Link Di-7200G 命令注入漏洞
D-Link Di-7200G is a gigabit enterprise router from China Youxun D-Link. D-Link DI-7200GV2.E1 v21.04.09E1 is vulnerable to a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via path and time parameters...
CVE-2021-20134
Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file on the router's filesystem as the log file used by either Quagga service zebra or ripd. Subsequen...
CVE-2021-20132
Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router i.e., as the "admin" user, UID 0...
The vulnerability of the sub_80046EB4 (/formSetPortTr) function in the D-Link DIR-809 wireless router’s microprogramming software allows a hacker to execute arbitrary code on the target system.
The vulnerability of the sub80046EB4 /formSetPortTr function in the wireless router software from D-Link, the DIR-809, is related to stack buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system using the created POST request...
CVE-2021-33271
D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function sub80046EB4 in /formSetPortTr. This vulnerability is triggered via a crafted POST request...
CVE-2021-33267
D-Link DIR-809 devices with firmware through DIR-809AxFW1.12WWB0320190410 were discovered to contain a stack buffer overflow vulnerability in the function FUN80034d60 in /formStaticDHCP. This vulnerability is triggered via a crafted POST request...
D-Link Dwr-932C E1 操作系统命令注入漏洞
The D-Link Dwr-932C E1 is a WiFi mobile modem router from China-based D-Link.A security vulnerability exists in the D-Link DWR-932C E1 firmware, which stems from an OS command injection in debugfcgi. An attacker could exploit this vulnerability to perform command injection via a crafted HTTP...
CVE-2020-25367
A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login...
D-Link DIR-823G 命令注入漏洞
The D-Link DIR-823G is an AC1200M dual-band gigabit wireless router.A command injection vulnerability exists in the HNAP1 protocol of the D-Link DIR-823G version 1.0.2B05. The vulnerability can be exploited to execute arbitrary web scripts via shell meta characters in the PrivateLogin field of th...
PT-2021-4603
Name of the Vulnerable Software and Affected Versions D-Link DIR-868LW version 1.12b Description The issue is related to weaknesses in the authentication procedure of the D-Link DIR-868LW router's web interface. This allows a remote attacker to obtain users' DNS query history due to the lack of...
CVE-2021-34860
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...
The vulnerability of the Telnet service of the D-Link DIR-880L router’s microprogramming system lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Telnet service provided by the D-Link DIR-880L router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
CVE-2021-21913
An information disclosure vulnerability exists in the WiFi Smart Mesh functionality of D-LINK DIR-3040 1.13B03. A specially-crafted network request can lead to command execution. An attacker can connect to the MQTT service to trigger this vulnerability...
D-Link DSL-3782 安全漏洞
D-Link DSL-3782 is a wireless router from D-Link Taiwan, China.A buffer overflow vulnerability exists in the D-Link DSL-3782 EU v1.01 and EU v1.03 versions, which originates from the WEB interface /cgi-bin/NewGUI/Igmp.asp when executing operations on memory data boundary is not properly validated...
CVE-2021-39510
An issue was discovered in D-Link DIR816A1FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...