Lucene search
+L

92 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:34 a.m.•23 views

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

9.8CVSS7AI score0.00763EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2011-4641

Malware in sbrugna...

6.8CVSS5.4AI score0.03064EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-36105

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00886EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/08/11 12:00 a.m.•19 views

The vulnerability in the command.php script of D-Link DIR-300 and DIR-600 router microprogramming software allows a hacker to gain unauthorized access to protected information and execute arbitrary commands.

The vulnerability of the command.php script in D-Link DIR-300 and DIR-600 router microprogramming systems is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker, operating remotely, to ga...

10CVSS6.4AI score0.16721EPSS
SaveExploits2References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/08/08 12:00 a.m.•16 views

The vulnerability of the web interface of D-Link DIR-300 and DIR-600 microprogrammed software routers allows a hacker to execute arbitrary commands.

The vulnerability of the web interfaces of D-Link DIR-300 and DIR-600 microprogrammed software routers is related to the failure to eliminate special elements used in the operating system’s processing of the pingIp parameter. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS6.3AI score0.13637EPSS
SaveExploits2References5Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/05 12:00 a.m.•3 views

CVE-2013-10069: Improper Neutralization of Special Elements used in an OS Command

The web interface of multiple D-Link routers, including DIR-600 rev B ≤2.14b01 and DIR-300 rev B ≤2.13, contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to...

10CVSS6.3AI score0.16721EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/01 12:00 a.m.•1 views

CVE-2013-10048: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 firmware ≤ 2.13 and ≤ 2.14b01, respectively—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker c...

9.8CVSS6.7AI score0.17052EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•14 views

D-Link DIR-615和D-Link DIR-300 安全漏洞

The D-Link DIR-615 and D-Link DIR-300 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-300 rev A version 1.05 and the D-Link DIR-615 rev D version 4.13, which stems from insufficient cleanup of toolsvct.xgi endpoint inputs, and could lead to...

8.8CVSS6.4AI score0.13637EPSS
SaveExploits2References7
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•22 views

D-Link DIR-600和D-Link DIR-300 rev B 安全漏洞

The D-Link DIR-600 and D-Link DIR-300 rev B are both wireless routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-300 rev B and the D-Link DIR-600 version 2.13 and earlier and version 2.14b01 and earlier, which stems from improper handling of command.php endpoin...

9.8CVSS6.2AI score0.17052EPSS
SaveExploits2References7
RedhatCVE
RedhatCVE
•added 2025/05/22 1:37 a.m.•19 views

CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

6.8CVSS6.3AI score0.03064EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/05/16 12:00 a.m.•156 views

D-Link DIR-300 Multiple Vulnerabilities (2011 - 2024)

D-Link DIR-300 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS5.9AI score0.23983EPSS
SaveExploits9References14
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•215 views

D-Link DIR-600 / DIR-300 Unauthenticated Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link DIR-600 / DIR-300 Unauthenticated Remote Command Execution', 'Description' = %q This module exploits an OS Command Injection vulnerability...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/08/07 12:00 a.m.•26 views

The vulnerability of the D-Link DIR-300 router’s telnet service allows a hacker to gain full control over the device.

The vulnerability of the D-Link DIR-300 router’s telnet service lies in the ability to use pre-determined credentials. Exploiting this vulnerability allows a remote attacker to gain full control over the device...

8.8CVSS6AI score0.00763EPSS
SaveExploits1References4
NVD
NVD
•added 2024/08/06 4:15 p.m.•51 views

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

9.8CVSS0.00763EPSS
SaveExploits1References2
OSV
OSV
•added 2024/08/06 4:15 p.m.•17 views

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

9.8CVSS5.8AI score0.00763EPSS
SaveExploits1References2
CVE
CVE
•added 2024/08/06 12:00 a.m.•79 views

CVE-2024-41616

CVE-2024-41616 affects D-Link DIR-300 REVA firmware v1.06B05_WW, where the Telnet service uses hardcoded credentials, enabling potential unauthenticated access if Telnet is exposed. The vulnerability is rooted in the Telnet implementation, with high impact on confidentiality, integrity, and avail...

9.8CVSS7.2AI score0.00763EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/08/06 12:00 a.m.•15 views

D-Link DIR-300 安全漏洞

The D-Link DIR-300 is a wireless router from China AUO D-Link. A security vulnerability exists in D-Link DIR-300 v1.06B05WWW, which originates from the Telnet service using hardcoded credentials...

9.8CVSS5.7AI score0.00763EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•2 views

CVE-2024-41616: Use of Hard-coded Credentials

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

9.8CVSS6.6AI score0.00763EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/08/06 12:00 a.m.•57 views

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

0.00763EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/08/06 12:00 a.m.•22 views

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

7.2AI score0.00763EPSS
SaveExploits1References2
Rows per page
Query Builder