Lucene search
+L

10240 matches found

CNVD
CNVD
•added 2025/05/14 12:00 a.m.•16 views

D-Link DIR-600L formSysCmd Function Command Injection Vulnerability

The D-Link DIR-600L is an entry-level wireless router from China-based AUO D-Link that supports 150Mbps wireless transmission and four 100Gbps wired ports. The D-Link DIR-600L suffers from a command injection vulnerability that stems from the formSysCmd function parameter host failing to properly...

9.8CVSS9AI score0.04221EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/05/14 12:00 a.m.•24 views

D-Link DIR-600L wake_on_lan Function Command Injection Vulnerability

The D-Link DIR-600L is a wireless router from China's AUO D-Link. The D-Link DIR-600L suffers from a command injection vulnerability that stems from the wakeonlan function parameter host failing to correctly filter constructed command special characters, commands, etc. The vulnerability can be...

9.8CVSS8.8AI score0.04221EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/05/14 12:00 a.m.•22 views

D-Link DIR-880L /htdocs/ssdpcgi File Command Injection Vulnerability

The D-Link DIR-880L is a dual-band Gigabit wireless router from China's AUO D-Link. The D-Link DIR-880L suffers from a command injection vulnerability, which arises from the failure of the file /htdocs/ssdpcgi in the component Request Header Handler to correctly filter the constructed command...

9.8CVSS6.5AI score0.21572EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•16 views

The vulnerability of the wake_on_lan function in D-Link DIR-619L router software allows a hacker to execute arbitrary code.

The vulnerability of the wakeonlan function in D-Link DIR-619L router software lies in the lack of measures taken to clean data at the control level when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS7.2AI score0.06976EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•19 views

The vulnerability of the formSetWanL2TP function in the microprogramming software for D-Link DIR-600L router allows a hacker to execute arbitrary code.

The vulnerability of the formSetWanL2TP function in the microprogramming software for D-Link DIR-600L router involves copying buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by using the host parameter...

10CVSS8.1AI score0.02438EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•19 views

The vulnerability of the /goform/formSetPassword function in D-Link’s DIR-618 and DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/formSetPassword function in D-Link DIR-618 and DIR-605L router microprogramming systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

4.3CVSS6.3AI score0.01007EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•23 views

Vulnerability of the /goform/formSetPortTr function in D-Link DIR-618 and DIR-605L router microprogramming software, allowing a hacker to execute arbitrary code.

The vulnerability of the /goform/formSetPortTr function in D-Link DIR-618 and DIR-605L router microprogramming systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

4.3CVSS6.3AI score0.00773EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•17 views

The vulnerability of the /goform/formVirtualServ function in D-Link DIR-618 and DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/formVirtualServ function in D-Link DIR-618 and DIR-605L router microprogramming systems is related to access control errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

4.3CVSS6.3AI score0.0125EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•17 views

The vulnerability of the sub_41710C function (/goform/diag_nslookup) in the D-Link DIR-823X AX3000 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the sub41710C function /goform/diagnslookup in the D-Link DIR-823X AX3000 router’s microprogramming system exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

6.5CVSS5.9AI score0.04534EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•19 views

The vulnerability of the formSetWAN_Wizard534 function in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetWANWizard534 function in the microprogramming software for D-Link DIR-605L routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using the...

9CVSS8.1AI score0.02722EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•27 views

The vulnerability of the formEasySetupWizard function in the D-Link DIR-600L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formEasySetupWizard function in the D-Link DIR-600L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by using the host...

10CVSS8.1AI score0.01269EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•13 views

The vulnerability of the formSetLog function in the D-Link DIR-600L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetLog function in the D-Link DIR-600L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code by using the host...

10CVSS8.1AI score0.01563EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•18 views

The vulnerability of the formSetWAN_Wizard534 function in the microprogramming software for D-Link DIR-600L router allows a hacker to execute arbitrary code.

The vulnerability of the formSetWANWizard534 function in the microprogramming software of the D-Link DIR-600L router is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code b...

10CVSS8.1AI score0.01563EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•21 views

The vulnerability of the formSetWAN_Wizard52 function in D-Link DIR-619L router microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWANWizard52 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.03041EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•13 views

The vulnerability of the formSetWizard2 function in the D-Link DIR-619L router’s microprogramming software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetWizard2 function in D-Link DIR-619L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

9CVSS7.6AI score0.03041EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•12 views

The vulnerability of the ssdpcgi_main function in the binary file cgibin of D-Link DIR-815 router microprogramming software, allowing a hacker to execute any command they desire.

The vulnerability of the ssdpcgimain function in the binary file cgibin of D-Link DIR-815 router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.20188EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•16 views

The vulnerability of D-Link DIR-859 router’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of D-Link DIR-859 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.9AI score0.32222EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•21 views

The vulnerability of the /goform/formTcpipSetup function in D-Link DIR-618 and DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/formTcpipSetup function in D-Link DIR-618 and DIR-605L router microprogramming software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

4.3CVSS6.3AI score0.00773EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•19 views

The vulnerability of the /goform/formSetDDNS function in D-Link DIR-618 and DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/formSetDDNS function in D-Link DIR-618 and DIR-605L router microprogramming systems is related to access control errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

4.3CVSS6.3AI score0.00773EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/05/14 12:00 a.m.•21 views

The vulnerability of D-Link DIR-816 A2’s microprogrammed software, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-816 A2 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS5.9AI score0.01022EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder