D-link DAP-1360 - Path Traversal / Cross-Site Scripting

Exploit Title: D-Link DAP-1360 File path traversal and Cross site scriptingreflected can lead to Authentication Bypass easily. Date: 20-07-2018 Exploit Author: r3m0t3nu11 Contact : http://twitter.com/r3m0t3nu11 Vendor : www.dlink.com Version: Hardware version: F1 Firmware version: 6.O5 Tested...

D-Link DAP-1160 Unauthenticated Remote Configuration Remote Reboot - Ver2

A vulnerability exists in D-Link DAP-1160. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

D-Link DAP-1360 Cross-Site Request Forgery Vulnerability (CNVD-2017-07250)

D-Link DAP-1360 with is a router. The D-Link DAP-1360 suffers from a cross-site request forgery vulnerability that can be exploited by a remote attacker to have elevated privileges by performing a CSRF attack using a domain name...

CVE-2016-1558

The CVE-2016-1558 entry concerns a buffer overflow in multiple D-Link router models (DAP-2310 2.06 and earlier; DAP-2330 1.06 and earlier; DAP-2360 2.06 and earlier; DAP-2553 B1 3.05 and earlier; DAP-2660 1.11 and earlier; DAP-2690 3.15 and earlier; DAP-2695 1.16 and earlier; DAP-3320 1.00 and ea...

CVE-2016-1559: Exposure of Sensitive Information to an Unauthorized Actor

D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP...

CVE-2016-1558: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote...

D-Link DAP-1360 < 2.5.4 Multiple CSRF Vulnerabilities

D-Link DAP-1360 devices are prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

D-Link DAP Devices Detection (HTTP)

HTTP based detection of D-Link DAP Devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Android Qualcomm QDSP6v2 Driver Denial of Service Vulnerability (CNVD-2016-09482)

Android is an open source operating system based on Linux. A security vulnerability in the sound/soc/msm/qdsp6v2/msm-ds2- dap-config.c file in the Qualcomm QDSP6v2 driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the applicatio...

Android Qualcomm QDSP6v2 Driver Denial of Service Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the sound/soc/msm/qdsp6v2/msm-ds2- dap-config.c file in the Qualcomm QDSP6v2 driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the applicatio...

PT-2016-7054

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue is related to the sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c file in a Qualcomm QDSP6v2 driver. It allows attackers to cause a denial of service or possibly have other unspecified...

PT-2016-7055

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05 Description The issue allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data in the sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c file in a Qualcomm...

CVE-2016-6693: Improper Input Validation

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585...

CVE-2016-6695: Improper Restriction of Operations within the Bounds of a Memory Buffer

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted visualizer data length, aka Qualcomm internal bug CR 1033540...

CVE-2016-6696: Improper Input Validation

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130...

CVE-2016-6694: Improper Input Validation

sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data, aka Qualcomm internal bug CR 1033525...

D-link DIR-890L HNAP 未授权信息泄漏漏洞

HNAPHome Network Administration Protocol,家庭网络管理协议是一种基于SOAPSimple Object Access Protocol,简单对象管理协议的协议，和UPnP很像，通常被D-Link的”EZ”设置程序用来初始化设置路由器。 存在问题代码： / Grab a pointer to the SOAPAction header / SOAPAction = getenv"HTTPSOAPACTION"; / Skip authentication if the SOAPAction header contains...

D-Link DAP-1160 Authentication Bypass

The IS-2010-005 advisory describes a vulnerability in the D-Link DAP-1160, that allows for authentication bypass and complete device reconfiguration. Authentication can be bypassed by accessing the URL: http://IPADDR/toolsfirmw.htm within 40 seconds of the web server start, and consequently after...

D-Link DAP-1320 Code Execution

The vulnerability of the microprogrammed software in the D-Link DAP-1320 wireless access point allows a malicious actor to execute arbitrary code remotely...

D-Link DAP-1320 HNAP Code Execution

The vulnerability of the HNAP interface of the D-Link DIR-645 wireless router relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...