Lucene search
+L

194 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.30 views

D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01126EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.25 views

D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01126EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.35 views

D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01126EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.31 views

D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01126EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.37 views

D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01126EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.34 views

D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01126EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2024/01/11 12:00 a.m.28 views

D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

6.8CVSS7.5AI score0.01126EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:00 a.m.12 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.8CVSS7.8AI score0.01114EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:00 a.m.8 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

8.8CVSS8.3AI score0.00742EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/12 12:00 a.m.13 views

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data during the processing of the HNAP request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8CVSS7.9AI score0.01114EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:00 a.m.16 views

The vulnerability of the SetSysEmailSettings function in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code by sending specially crafted HNAP requests t...

8CVSS7.9AI score0.01114EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.10 views

The vulnerability of the SetSysEmailSettings() function in D-Link DIR-X3260 Wi-Fi routers allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data when processing the EmailTo parameter. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code by...

8CVSS7.9AI score0.01114EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/10/07 12:00 a.m.9 views

D-Link DIR-X3260 EmailFrom Command Injection Vulnerability

The D-Link DIR-X3260 is a mainstream router from D-Link that supports Wi-Fi 6. The D-Link DIR-X3260 suffers from a command injection vulnerability that stems from the SetSysEmailSettings EmailFrom command injection remote code execution vulnerability. An attacker can exploit this vulnerability to...

8CVSS9.2AI score0.01114EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.34 views

(0Day) D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

8.8CVSS7.3AI score0.00742EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.10 views

PT-2023-6105 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

8.3CVSS7.6AI score0.01114EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.7 views

PT-2023-5853 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to the SetSysEmailSettings function of the D-Link DIR-X3260 Wi-Fi router's firmware, which is associated with insufficient input data cleaning. This can be...

8CVSS7.6AI score0.01114EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.11 views

PT-2023-5697 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the prog.cgi component of D-Link DIR-X3260 Wi-Fi routers, allowing attackers to execute arbitrary code. This can be exploit...

8.8CVSS7.8AI score0.00742EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.31 views

(0Day) D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

8CVSS7.4AI score0.01114EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.31 views

(0Day) D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8CVSS7.4AI score0.01114EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.24 views

(0Day) D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8CVSS7.4AI score0.01114EPSS
SaveExploits0
Rows per page
Query Builder