PT-2024-16459

Name of the Vulnerable Software and Affected Versions Kognetiks Chatbot for WordPress plugin versions up to, and including, 2.1.7 Description The Kognetiks Chatbot for WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the dir parameter due to insufficient input sanitization and...

CVE-2024-51186

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution RCE vulnerability via the pingaddr parameter in the pingv4 and pingv6 functions...

CVE-2024-51186

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution RCE vulnerability via the pingaddr parameter in the pingv4 and pingv6 functions...

CVE-2024-51186: Improper Neutralization of Special Elements used in a Command

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution RCE vulnerability via the pingaddr parameter in the pingv4 and pingv6 functions...

D-Link DIR-820L 安全漏洞

The D-Link DIR-820L is a dual-band wireless router from China's AUO D-Link. The D-Link DIR-820L suffers from a code execution vulnerability that stems from the pingaddr parameter in the pingv4 and pingv6 functions failing to properly filter the special elements of the constructed code segment. An...

CVE-2024-51186

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution RCE vulnerability via the pingaddr parameter in the pingv4 and pingv6 functions...

CVE-2024-51186

The D-Link DIR-820L router, specifically version 1.05b03 , is vulnerable to remote code execution (RCE) . The root cause is the improper neutralization of special elements within the ping_addr parameter in the ping_v4 and ping_v6 functions. Because the software fails to properly filter or sanitiz...

The vulnerability of D-Link DIR-823G router’s microprogramming software, related to insufficient protection of operational data, allows unauthorized access to protected information.

The vulnerability of D-Link DIR-823G router microprogramming software is related to insufficient protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-51186

D-Link DIR-820L 1.05b03 was discovered to contain a remote code execution RCE vulnerability via the pingaddr parameter in the pingv4 and pingv6 functions...

Rapid7 Velociraptor MSI Installer 安全漏洞

Rapid7 Velociraptor MSI Installer is a unique, advanced, open source endpoint monitoring, digital forensics, and cyber response platform from Rapid7 USA. A security vulnerability exists in Rapid7 Velociraptor MSI Installer prior to version 0.73.3 that originates from the execution of arbitrary co...

D-Link DIR-823G SetNetworkTomographySettings Function Command Injection Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from a command injection vulnerability that stems from the Address parameter in the SetNetworkTomographySettings function failing to properly filter construct command special characters, commands, and so...

D-Link DIR-823G SetWanSettings Function Command Injection Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G version 1.0.2B05 suffers from a command injection vulnerability that stems from the HostName parameter in the SetWanSettings function failing to properly filter constructed command special characters, commands,...

The vulnerability of the /htdocs/web/getcfg.php file in the D-Link DIR-815 router’s microprogramming software allows a hacker to access confidential information.

The vulnerability of the /htdocs/web/getcfg.php file in the D-Link DIR-815 router microprogramming system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose confidential information through a specially crafted GET request...

CVE-2024-51024

D-Link DIR823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

CVE-2024-51023

D-Link DIR823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...

D-Link DIR-823G 安全漏洞

The D-Link DIR-823G is a wireless router from China's AUO D-Link. The D-Link DIR-823G suffers from a command injection vulnerability that stems from the Address parameter in the SetNetworkTomographySettings function failing to properly filter construct command special characters, commands, and so...

PT-2024-8244 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR 823G version 1.0.2B05 Description: The issue is related to a command injection vulnerability in the SetNetworkTomographySettings function, specifically via the Address parameter. This allows attackers to execute arbitrary OS comman...

The vulnerability of the formSetDomainFilter() function (/goform/formSetDomainFilter) in the D-Link DIR-605L router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDomainFilter function /goform/formSetDomainFilter of the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the formSetQoS() function (/goform/formSetQoS) of the D-Link DIR-605L router’s software, which allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetQoS function /goform/formSetQoS of the D-Link DIR-605L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

The vulnerability of the formAdvanceSetup function (/goform/formAdvanceSetup) in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formAdvanceSetup function /goform/formAdvanceSetup in D-Link DIR-605L router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the webpage...