CVE-2023-24330: Improper Neutralization of Special Elements used in a Command

Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/...

CVE-2023-24330

The D-Link DIR-882 wireless router is susceptible to a command injection vulnerability in the HNAP1 protocol implementation, specifically affecting firmware version DIR882A1_FW130B06 . The root cause is the failure to neutralize special elements used in operating system commands. A malicious acto...

CVE-2023-24331

Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816A2v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter...

CVE-2023-24331: Improper Neutralization of Special Elements used in a Command

Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816A2v1.10CNB04 allows attackers to run arbitrary commands via the urlAdd parameter...

DLink DIR-610 Multiple Vulnerabilities

The version of DLink installed on the remote host is unsupported and affected by multiple vulnerabilities as referenced in the vendor advisory. - D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php - D-Link DIR-610 devices allow Information Disclosure via...

CVE-2024-24321

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...

CVE-2024-24321

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...

Design/Logic Flaw

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...

CVE-2024-24321: Improper Neutralization of Special Elements used in a Command

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...

D-Link DIR-816 Command Injection Vulnerability

The D-Link DIR-816 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the Dlink DIR-816A2 v.1.10CNB05 version, which originates from allowing remote attackers to execute arbitrary code via the Wizardstep4ssid2 parameter in the sub42DA54 function...

PT-2024-20357

Name of the Vulnerable Software and Affected Versions Dlink DIR-816A2 version 1.10CNB05 Description An issue allows a remote attacker to execute arbitrary code via the wizardstep4 ssid 2 parameter in the sub 42DA54 function. Recommendations For Dlink DIR-816A2 version 1.10CNB05, as a temporary...

CVE-2024-24321

CVE-2024-24321 affects D-Link DIR-816A2 v1.10CNB05. A vulnerability in the sub_42DA54 function’s wizardstep4_ssid_2 parameter enables remote code execution, exploitable over the network with no user interaction. Reported impact is arbitrary code execution, with high confidentiality, integrity, an...

CVE-2024-24321

An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...

The vulnerability of the soapcgi_main function in D-Link DIR-815 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the soapcgimain function in D-Link DIR-815 router microprogramming software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DEBIAN-CVE-2024-24577

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...

UBUNTU-CVE-2024-24577

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...

Directory traversal

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation...

PT-2024-1689

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 1.6.5 libgit2 versions prior to 1.7.2 Description The issue is related to a heap corruption vulnerability in the has dir name function in src/libgit2/index.c, which can be exploited for arbitrary code execution. This...

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-0921

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...