CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344: Improper Neutralization of Special Elements used in a Command

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342: Improper Neutralization of Special Elements used in a Command

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343

The D-Link DIR-822+ wireless router (version V1.0.5 ) is vulnerable to a command injection flaw within the ChgSambaUserSettings() function of the prog.cgi script. The root cause is the failure to properly sanitize special elements used in the operating system's processing of the samba_name parame...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

D-Link DIR-822 安全漏洞

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the ChgSambaUserSettings function of prog.cgi, allowing remote attackers to execute arbitrary commands...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

The D-Link DIR-822+ wireless router (version V1.0.5 ) is vulnerable to a command injection flaw in the SetPlcNetworkpwd function of the prog.cgi script. The root cause is a failure to neutralize special elements used in operating system commands when processing the local_plc parameter. This allow...

PT-2024-3192 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.5 Description: The issue is related to a command injection vulnerability in the ftext function of the upload firmware.cgi script in the D-Link DIR-822+ firmware. This vulnerability is due to the lack of proper...

Exploit for CVE-2023-51119

CVE-2023-51119 Improper Access Control on D-Link DIR-605L rout...

The vulnerability of the scandir.sgi file in the D-Link DIR-868L router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the scandir.sgi file of the D-Link DIR-868L router software is caused by buffer overflow on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2024-21529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an endless loop in directory parsing. If a directory contains a block with only ". afsXXXX" files from an uncompleted silly-rename, these files are skipped withou...

PT-2024-3333 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and before Description: The issue is related to a command injection vulnerability via the hnap main function. This vulnerability is associated with the failure to neutralize special elements used in th...

PT-2024-3332 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router versions v1.01KRb03 and before Description: The issue is related to a Permission Bypass vulnerability via the getcfg.php component. It is associated with inadequate access control when handling the AUTHORIZED GROUP...

nginxWebUI 路径遍历漏洞

nginxWebUI is an nginx web configuration tool. A path traversal vulnerability exists in nginxWebUI, which stems from the failure of the dir parameter of the findCountByQuery method of the /adminPage/www/addOver file to correctly filter for special elements in the path of a resource or file. An...

dir-shop.cz Cross Site Scripting vulnerability OBB-3902761

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the sub_477AA0 function in D-Link DIR-882 router microprogramming software allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of sub477AA0 in D-Link DIR-882 router microprogramming software is caused by buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause service failure or execute arbitrary code...