PT-2024-7504

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: A critical issue affects the formSetDomainFilter function in the /goform/formSetDomainFilter file. The manipulation of the curTime argument leads to a buffer overflow. This issue can be...

PT-2024-8961 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A critical issue affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to a buffer overflow. This issue can be exploited remotely. The...

PT-2024-7245

Name of the Vulnerable Software and Affected Versions D-Link DIR-605L version 2.13B01 BETA Description The issue affects the formEasySetupWizard and formEasySetupWizard2 functions of the D-Link DIR-605L router's firmware, specifically the /goform/formEasySetupWizard endpoint. It is related to a...

PT-2024-7244 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: The issue is related to a buffer overflow vulnerability in the formSetWanPPPoE function of the /goform/formSetWanPPPoE file. This vulnerability can be exploited by sending a specially crafted...

PT-2024-7033 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR 882 versions FW130B06 D-Link DIR 878 version FW130B08 Description: A command injection issue exists in the SetWLanRadioSettings function due to insufficient neutralization of special elements used in an OS command. This allows...

PT-2024-7240 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: A critical issue affects the function formLogDnsquery of the file /goform/formLogDnsquery. The manipulation of the argument curTime leads to a buffer overflow. It is possible to launch the...

PT-2024-7234

Name of the Vulnerable Software and Affected Versions D-Link DIR-605L version 2.13B01 BETA Description A critical issue has been identified in the function formdumpeasysetup of the file /goform/formdumpeasysetup, related to a buffer overflow due to the lack of input size validation. This can be...

PT-2024-8960 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 Description: A critical issue affects the formResetStatistic function in the file /goform/formResetStatistic. The manipulation of the curTime argument leads to a buffer overflow. This can be initiated remotely...

PT-2024-7034 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 versions FW130B06 D-Link DIR-878 versions FW130B08 Description: A command injection issue exists in the SetWLanRadioSecurity function due to insufficient neutralization of special elements used in an OS command. This allows...

PT-2024-7243

Name of the Vulnerable Software and Affected Versions D-Link DIR-605L version 2.13B01 BETA Description A critical issue was found in the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to buffer overflow. It is possible to...

PT-2024-7032 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version DIR 878 FW130B08 D-Link DIR-882 version DIR 882 FW130B06 Description: The issue exists due to the lack of neutralization of special elements used in the operating system command in the SetPortForwardingSettings function...

PT-2024-7505 · D Link · D-Link Dir-605L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-605L version 2.13B01 BETA Description: A critical issue affects the formSetQoS function of the file /goform/formSetQoS. The manipulation of the curTime argument leads to a buffer overflow. This can be exploited remotely, potentiall...

PT-2024-7030 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 versions FW130B06 D-Link DIR-878 version FW130B08 Description: A command injection issue exists in the SetGuestZoneRouterSettings function due to insufficient neutralization of special elements used in an OS command. This allow...

PT-2024-7035 · D Link · D-Link Dir-878 +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-882 versions FW130B06 D-Link DIR-878 versions FW130B08 Description: A command injection issue exists due to the lack of neutralization of special elements used in the operating system command in the SetVLANSettings function. This...

DIR-X4860 Buffer Overflow Vulnerability at AUO Electronic Devices (Shanghai) Co.

The DIR-X4860 is a wireless router from China's AUO D-Link. AUO Electronic Devices Shanghai Co. The DIR-X4860 suffers from a buffer overflow vulnerability that stems from the inclusion of a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code on...

DIR-X4860 OS Command Injection Vulnerability in AUO Electronic Devices (Shanghai) Co.

The DIR-X4860 is a wireless router from China's AUO D-Link. AUO DIR-X4860 suffers from an operating system command injection vulnerability that originates from a failure to properly validate user input in the telnet service, which can be exploited by an unauthenticated, remote attacker to log int...

Unspecified vulnerability in DIR-X4860 of AUO Electronic Equipment (Shanghai) Co., Ltd (CNVD-2024-39256)

The DIR-X4860 is a wireless router from China's AUO D-Link. A security vulnerability exists in the DIR-X4860 of AUO Electronic Devices Shanghai Co. An unauthorized remote attacker could exploit the vulnerability and be able to log in and execute operating system commands using hard-coded...

PT-2024-14780

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A critical vulnerability in the Linux kernel has been identified, specifically in the 'ntb: intel' section, related to the debugfs create dir function. This function returns error pointers and...

SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

SolarWinds has released fixes to address two security flaws in its Access Rights Manager ARM software, including a critical vulnerability that could result in remote code execution. The vulnerability, tracked as CVE-2024-28991, is rated 9.0 out of a maximum of 10.0 on the CVSS scoring system. It...

D-Link DIR-X4860 操作系统命令注入漏洞

The DIR-X4860 is a wireless router from China's AUO D-Link. AUO DIR-X4860 suffers from an operating system command injection vulnerability that originates from a failure to properly validate user input in the telnet service, which can be exploited by an unauthenticated, remote attacker to log int...