10240 matches found
D-Link DIR-3040 prog.cgi SetIPv6PppoeSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...
PT-2023-5545 · D Link +1 · D-Link Dir-3040 +1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-3040 affected versions not specified Description: The issue exists due to the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer in the prog.cgi file. This allows a remote...
D-Link DIR-3040 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...
VulnCheck KEV: CVE-2018-25115
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...
CLSA-2023-1692817120 php: Fix of 2 CVEs
CVE-2023-3823: Fix external entity loading in XML without enabling by1 sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phardirread...
The vulnerability of the fgets function in D-Link DIR-880 A1 router software allows a hacker to execute arbitrary code.
The vulnerability of the fgets function in D-Link DIR-880 A1 router microprogramming software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the FUN_00010824 function in D-Link DIR-880 A1 router microprogramming software allows a hacker to induce a service failure.
The vulnerability of the FUN00010824 function in D-Link DIR-880 A1 microprogrammed router software is related to pointer assignment errors. Exploiting this vulnerability could allow a malicious actor to cause service failure...
The vulnerability of the FUN_0001be68 function in D-Link DIR-880 A1 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the FUN0001be68 function in D-Link DIR-880 A1 microprogrammed router software is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CLSA-2023-1692632011 php: Fix of 2 CVEs
CVE-2023-3823: Fix external entity loading in XML without enabling by sanitizing libxml2 globals before parsing - CVE-2023-3824: Fix buffer mismanagement in phardirread...
CVE-2023-39674
D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...
CVE-2023-39674
D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...
CVE-2023-39674
D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...
CVE-2023-39671
D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function FUN0001be68...
CVE-2023-39671
D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function FUN0001be68...
CVE-2023-39671
D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function FUN0001be68...
CVE-2023-39668
D-Link DIR-868L fwrevA1-12eumulti20170316 was discovered to contain a buffer overflow via the param2 parameter in the inetntoa function...
CVE-2023-39669
D-Link DIR-880 A1FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN00010824...
CVE-2023-39667
D-Link DIR-868L fwrevA1-12eumulti20170316 was discovered to contain a buffer overflow via the param2 parameter in the FUN0000acb4 function...