The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data during the processing of the HNAP request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the CLI microprogramming software for D-Link routers such as DIR-2150 and DIR-1260 allows a hacker to execute arbitrary code.

The vulnerability of the CLI microprogramming software-based D-Link DIR-2150 and DIR-1260 routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SetSysEmailSettings function in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in D-Link DIR-X3260 Wi-Fi routers is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code by sending specially crafted HNAP requests t...

USN-6425-1 samba vulnerabilities

Sri Nagasubramanian discovered that the Samba aclxattr VFS module incorrectly handled read-only files. When Samba is configured to ignore system ACLs, a remote attacker could possibly use this issue to truncate read-only files. CVE-2023-4091 Andrew Bartlett discovered that Samba incorrectly handl...

dir-shop.cz Cross Site Scripting vulnerability OBB-3738098

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G router software allows a hacker to cause a service failure.

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure using the Encryptio paramet...

The vulnerability of the SetWan3Settings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWan3Settings function in D-Link DIR-3040 wireless router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP...

The vulnerability of the SetWanSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWanSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to TC...

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G router software allows a hacker to cause a service failure.

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G router microprogramming software is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure using the TXPower parameter...

The vulnerability of the cancelPing function in D-Link DIR-820L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the cancelPing function in D-Link DIR-820L router microprogramming software arises due to overflow in the stack buffer. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

The vulnerability of the SetSysEmailSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests ...

The vulnerability of the SetQuickVPNSettings() function in the microprogramming software for D-Link DIR-3040 routers allows a hacker to execute arbitrary code.

The vulnerability of the SetQuickVPNSettings function in the D-Link DIR-3040 wireless router’s microprogramming software is related to the operation of writing data outside of the buffer in memory when processing the PSK parameter. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the SetWanSettings function in D-Link DIR-823G router software allows a hacker to induce a service failure.

The vulnerability of the SetWanSettings function in D-Link DIR-823G router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G router software allows a hacker to cause a service failure.

The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the SSID parameter...

The vulnerability of the SetWLanRadioSecurity() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetWLanRadioSecurity function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests...

The vulnerability of the SetUsersSettings() function in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the SetUsersSettings function in D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to...

The vulnerability of the SetMyDLinkRegistration() function in the microprogramming software for D-Link DIR-3040 routers allows a hacker to execute arbitrary code.

The vulnerability of the SetMyDLinkRegistration function in the microprogramming software for D-Link DIR-3040 wireless routers stems from the operation of data out of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafte...

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-3040 wireless router software lies in the fact that the output of operations goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP requests to T...

The vulnerability of the SetTriggerPPPoEValidate() function in the D-Link DIR-3040 wireless router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetTriggerPPPoEValidate function in the D-Link DIR-3040 wireless router software lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HNAP...

D-Link DIR-823G Password Parameter Buffer Overflow Vulnerability

The D-Link DIR-823G is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-823G Password parameter due to incorrect boundary checking in the SetWanSettings function. An attacker could exploit this vulnerability to cause a denial of service...