Exploit for Exposure of Sensitive Information to an Unauthorized Actor in D-Link Dcs-936L_Firmware

📸 CVE-2018-18441-exploit - Easily Access D-Link Camera Data...

EUVD-2017-16826

Malware in sbrugna...

D-Link DCS-936L Cross-Site Request Forgery Vulnerability

The D-Link DCS-936L devices is a network camera from Terasic D-Link. A cross-site request forgery vulnerability exists in D-Link DCS-936L devices using firmware versions prior to 1.05.07, which stems from the program's use of an improper CSRF protection mechanism. An attacker could exploit the...

D-Link DCS-936L Cross Site Request Forgery

Exploit Title: D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability Date: 26/03/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-936L with firmware...

Cross site request forgery (csrf)

D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header...

CVE-2017-7851

D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header...

CVE-2017-7851

D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header...

CVE-2017-7851

D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header...

CVE-2017-7851

The CVE-2017-7851 vulnerability affects D-Link DCS-936L network cameras with firmware before 1.05.07. The issue is an inadequate CSRF protection mechanism that requires the device IP address to be a substring of the HTTP Referer header, enabling cross-site request forgery. Impact details in conne...

PT-2017-17953 · D Link · Dcs-936L

Name of the Vulnerable Software and Affected Versions: D-Link DCS-936L versions prior to 1.05.07 Description: The issue is related to an inadequate CSRF protection mechanism. It requires the device's IP address to be a substring of the HTTP Referer header. Recommendations: For versions prior to...

CVE-2017-7851: Cross-Site Request Forgery (CSRF)

D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer header...

D-Link DCS-936L Network Camera - Cross-Site Request Forgery

Exploit Title: D-Link DCS-936L network camera incomplete/weak CSRF protection vulnerability Date: 26/03/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage: http://us.dlink.com/product-category/home-solutions/view/network-cameras/ Version: Tested on DCS-936L with firmware...