Lucene search
+L

194 matches found

Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.11 views

PT-2023-5697 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the prog.cgi component of D-Link DIR-X3260 Wi-Fi routers, allowing attackers to execute arbitrary code. This can be exploit...

8.8CVSS7.8AI score0.00742EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.37 views

(0Day) D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

8CVSS7.4AI score0.01114EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.15 views

PT-2023-5896 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

8CVSS7.6AI score0.01114EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.27 views

(0Day) D-Link DIR-X3260 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

8CVSS7.4AI score0.01114EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2023/10/04 12:00 a.m.34 views

(0Day) D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

8CVSS7.4AI score0.01114EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/10/04 12:00 a.m.12 views

PT-2023-5852 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to the SetSysEmailSettings function of the D-Link DIR-X3260 Wi-Fi router's firmware, which is associated with insufficient input data cleansing. This can be...

8CVSS7.6AI score0.01114EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/07/14 12:00 a.m.12 views

PT-2023-8300 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. The specific flaw exists within the prog.cgi binary,...

7.2CVSS7.4AI score0.01126EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/07/14 12:00 a.m.16 views

PT-2023-8299 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. The specific flaw exists within the prog.cgi binary,...

7.2CVSS7.4AI score0.01126EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/07/14 12:00 a.m.10 views

PT-2023-8298 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. The specific flaw exists within the prog.cgi binary,...

7.2CVSS7.4AI score0.01023EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2023/07/11 12:00 a.m.12 views

The vulnerability of the prog.cgi implementation in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi implementation in D-Link DIR-X3260 Wi-Fi routers lies in insufficient cleaning of input data during the processing of the SOAPAction header. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.8CVSS8AI score0.01467EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/06 12:00 a.m.10 views

PT-2023-8302 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the prog.cgi component of D-Link DIR-X3260 Wi-Fi routers, allowing remote attackers to execute arbitrary code. The flaw...

7.2CVSS8AI score0.01126EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2023/06/30 12:00 a.m.29 views

D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the SOAPAction request header provided to the prog.cg...

8.8CVSS7.3AI score0.01467EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/05 12:00 a.m.16 views

PT-2023-5735 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

8CVSS7.6AI score0.01114EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/06/05 12:00 a.m.13 views

PT-2023-5734 · D Link · D-Link Dir-X3260

Name of the Vulnerable Software and Affected Versions: D-Link DIR-X3260 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this...

8CVSS7.6AI score0.01114EPSS
SaveExploits0References6
Rows per page
Query Builder