D-Link DIR-2150 Command Injection Vulnerability

The D-Link DIR-2150 is a wireless router from China-based AUO D-Link. The D-Link DIR-2150 suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary code...

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29685)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability that stems from a...

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29678)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability that stems from a...

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29681)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

D-Link DAP-1360 Stack Buffer Overflow Vulnerability (CNVD-2024-33380)

The D-Link DAP-1360 is a router from China-based AUO D-Link. The D-Link DAP-1360 stack buffer overflow vulnerability can be exploited by an attacker to execute arbitrary code...

D-Link DIR-2640 Command Injection Vulnerability

The D-Link DIR-2640 is a high-power Wi-Fi router from Taiwan, China's AUO D-Link that supports the AC2600 WiFi standard with dual-band 2.4GHz and 5GHz network transmission. The D-Link DIR-2640 suffers from a command injection vulnerability, which stems from the DestNetwork command injection remot...

D-Link DIR-2640 Command Injection Remote Code Execution Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router manufactured by the Chinese company AUO D-Link, which is mainly used to provide wireless network connectivity. The D-Link DIR-2640 suffers from a command injection remote code execution vulnerability that stems from the PrefixLen command injection...

The vulnerability of D-Link DIR-1950 Wi-Fi routers’ microprogramming software is related to errors in the authentication process for certificates. This allows attackers to execute a “Man-in-the-Middle” attack.

The vulnerability of D-Link DIR-1950 Wi-Fi routers’ microprogramming software is related to errors in the certificate validation process when downloading updates. Exploiting this vulnerability allows a remote attacker to execute a “Man-in-the-Middle” attack...

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23485)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...

PT-2024-5966 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2310 Hardware A Firmware 1.16RC028 Description: The issue is related to a stack-based buffer overflow in the ATP binary that handles PHP HTTP GET requests for the Apache HTTP Server. This allows remote attackers to execute arbitrar...

The vulnerability of D-Link DIR-823X AX3000 router’s microprogramming software arises from the lack of measures taken to neutralize specific elements, allowing attackers to execute arbitrary codes.

The vulnerability of the D-Link DIR-823X AX3000 router’s microprogramming software exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP request remotely...

CVE-2024-39202

D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution RCE vulnerability via the dhcpdstartip parameter at /goform/setlansettings...

CVE-2024-39202

D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution RCE vulnerability via the dhcpdstartip parameter at /goform/setlansettings...

CVE-2024-39202

D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution RCE vulnerability via the dhcpdstartip parameter at /goform/setlansettings...

CVE-2024-39202

D-Link DIR-823X firmware - 240126 was discovered to contain a remote command execution RCE vulnerability via the dhcpdstartip parameter at /goform/setlansettings...

D-Link DIR-823X 安全漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...

CVE-2024-39202

CVE-2024-39202 affects D-Link DIR-823X firmware 240126. A remote command execution (RCE) vulnerability exists in the /goform/set_lan_settings endpoint, exploitable via the dhcpd_startip parameter due to improper input handling. This could allow an attacker with network access to execute arbitrary...

CVE-2024-6525

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to deserialization. The attack may be launched...

CVE-2024-6525

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to deserialization. The attack may be launched...

CVE-2024-6525 D-Link DAR-7000 decodmail.php deserialization

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to deserialization. The attack may be launched...