2000 matches found
CVE-2021-44127
In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...
CVE-2021-44127
CVE-2021-44127 affects D-Link DAP-1360 F1 firmware versions <= v6.10. In the webupg binary, the attacker can use the file parameter with name=deleteFile after authorization to execute arbitrary system commands. This is documented across multiple sources (NVD entry and CNVD/CVE mirrors). The ex...
PT-2022-12000
Name of the Vulnerable Software and Affected Versions DLink DAP-1360 F1 versions =v6.10 Description The issue allows an attacker to execute arbitrary system commands using the file parameter when it is set to name=deleteFile after authorization. This is related to the "webupg" binary...
D-Link DAP-1360 security vulnerability
The D-Link DAP-1360 is a router from D-Link, a Chinese company. A security vulnerability exists in the DLink DAP-1360 F1 firmware, which stems from the fact that an attacker can execute arbitrary system commands with the name=deleteFile parameter, after authorization, using the file parameter to...
CVE-2021-44127: Undefined Security Weakness
In DLink DAP-1360 F1 firmware version =v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system commands when the parameter is "name=deleteFile" after being authorized...
D-Link DAP-1620 Path Traversal Vulnerability
A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...
CVE-2021-46381
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...
CVE-2021-46381
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...
CVE-2021-46381
CVE-2021-46381 affects the D-Link DAP-1620 (A1) device, where a path traversal leads to Local File Inclusion. The vulnerability allows reading sensitive internal files such as /etc/passwd and /etc/shadow via crafted input to the device’s web interface (notably through apply.cgi). Public exploit/m...
CVE-2021-46381: Improper Limitation of a Pathname to a Restricted Directory
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...
D-Link DAP-1620 has a path traversal vulnerability
A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...
Liferay Portal and Liferay DXP cross-site scripting vulnerabilities
Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...
D-Link DAP-2020 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webproc endpoin...
D-Link DAP-2020 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webproc endpoin...
PT-2022-1944
Name of the Vulnerable Software and Affected Versions D-Link DAP-1620 affected versions not specified Description The issue is related to Local File Inclusion due to path traversal errors in the software, allowing unauthorized access to internal files. This can lead to the reading of sensitive...
D-Link DAP-2020 Webproc Code Execution
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflows in the stack when processing the var:menu parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...
D-Link Webproc Code Execution
The vulnerability of the webproc getpage implementation in the microprogrammed wireless access points from D-Link, such as the DAP-2020, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
D-Link DAP-2020 Webproc Code Execution
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
D-Link DAP-2020 Web Cmd File List Code Execution
The vulnerability of the WEBCmdFileList function implementation in D-Link DAP-2020 wireless access points relates to the lack of measures taken to neutralize special elements used in operating system commands when processing CGI scripts. Exploiting this vulnerability can allow an attacker to...
D-Link DAP-2020 Webproc Code Execution
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflows during the processing of the var:page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...