Lucene search
+L

641 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 8:29 a.m.9 views

CVE-2019-10042

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication...

7.8CVSS6.9AI score0.01706EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:46 a.m.11 views

CVE-2019-10039

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication...

9.8CVSS6.9AI score0.01868EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:13 a.m.8 views

CVE-2019-10040

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication...

10CVSS7.3AI score0.02522EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/05/14 12:0 a.m.5 views

D-Link DIR-816 A2 Command Injection Vulnerability

The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2 suffers from a command injection vulnerability that stems from iptablesWebsFilterRun failing to properly filter constructor command special characters, commands, etc. No detailed vulnerability details are...

6.3CVSS9.7AI score0.01051EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.13 views

The vulnerability of D-Link DIR-816 A2’s microprogrammed software, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS5.9AI score0.00972EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/03 1:31 a.m.22 views

CVE-2025-44835

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell...

6.3CVSS8.8AI score0.01051EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/01 2:15 p.m.4 views

CVE-2025-44835

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell...

6.3CVSS6.1AI score0.01051EPSS
SaveExploits1References1
NVD
NVD
added 2025/05/01 2:15 p.m.17 views

CVE-2025-44835

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell...

6.3CVSS0.01051EPSS
SaveExploits1References1
CVE
CVE
added 2025/05/01 12:0 a.m.81 views

CVE-2025-44835

D-Link DIR-816 A2V1.1.0B05 is affected by a command injection in the iptablesWebsFilterRun function, enabling remote attackers to execute arbitrary shell commands. This vulnerability has been described across multiple sources (including Red Hat/CVE data and PT Security advisories) with a consiste...

6.3CVSS8.2AI score0.01051EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.5 views

D-Link DIR-816 A2 安全漏洞

The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. The D-Link DIR-816 A2 suffers from a command injection vulnerability that stems from iptablesWebsFilterRun failing to properly filter constructor command special characters, commands, etc. No detailed vulnerability details are...

6.3CVSS7.6AI score0.01051EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/05/01 12:0 a.m.7 views

PT-2025-18477 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version A2V1.1.0B05 Description: The issue is related to a command injection in iptablesWebsFilterRun, allowing remote attackers to execute arbitrary commands via the shell. This enables attackers to potentially gain unauthoriz...

6.5CVSS10AI score0.01051EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/01 12:0 a.m.8 views

CVE-2025-44835

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell...

8.8AI score0.01051EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/05/01 12:0 a.m.28 views

CVE-2025-44835

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell...

0.01051EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:58 a.m.15 views

CVE-2025-29743

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting...

6.5CVSS7.6AI score0.00972EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/04/25 12:0 a.m.2 views

D-Link DIR-816 A2 Command Injection Vulnerability

The D-Link DIR-816 A2 is a home and small office SOHO wireless router from D-Link. A command injection vulnerability exists in the D-Link DIR-816 A2. The vulnerability originates in the /goform/delRouting path. No detailed vulnerability details are provided at this time...

6.5CVSS6.9AI score0.00972EPSS
SaveExploits1References1
OSV
OSV
added 2025/04/22 8:15 p.m.7 views

CVE-2025-29743

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting...

6.5CVSS5.8AI score0.00972EPSS
SaveExploits1References1
NVD
NVD
added 2025/04/22 8:15 p.m.31 views

CVE-2025-29743

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting...

6.5CVSS0.00972EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/22 12:0 a.m.12 views

PT-2025-17592 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version A2V1.1.0B05 Description: A command injection was found in the /goform/delRouting endpoint of the D-Link DIR-816. This issue poses a high risk to users, who are urged to update their firmware as soon as possible to secur...

6.5CVSS7AI score0.00972EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/04/22 12:0 a.m.7 views

D-Link DIR-816 A2 安全漏洞

The D-Link DIR-816 A2 is a home and small office SOHO wireless router from D-Link. A command injection vulnerability exists in the D-Link DIR-816 A2. The vulnerability originates in the /goform/delRouting path. No detailed vulnerability details are provided at this time...

6.5CVSS7.6AI score0.00972EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/04/22 12:0 a.m.42 views

CVE-2025-29743

D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting...

0.00972EPSS
SaveExploits1References1
Rows per page
Query Builder