CVE-2023-39666

CVE-2023-39666 affects the D-Link DIR-842 firmware fw_revA_1-02_eu_multi_20151008. The vulnerability consists of multiple buffer overflows in the fgets function exposed via the acStack_120 and acStack_220 parameters. CVSS 3.1/3.1 base score 9.8 (CRITICAL) with network attack vector, no user inter...

CVE-2023-39674: Buffer Copy without Checking Size of Input

D-Link DIR-880 A1FW107WWb08 was discovered to contain a buffer overflow via the function fgets...

CVE-2023-39667

Summary: CVE-2023-39667 affects the D-Link DIR-868L router (firmware revA 1-12 EU multi 20170316). The vulnerability is a stack/param_2 buffer overflow in the function identified as FUN_0000acb4, enabling a remote attacker to potentially compromise the device via the network. CVSS 3.1 metrics ind...

CVE-2023-39668: Buffer Copy without Checking Size of Input

D-Link DIR-868L fwrevA1-12eumulti20170316 was discovered to contain a buffer overflow via the param2 parameter in the inetntoa function...

CVE-2023-39671

Affected product: D-Link DIR-880 (A1_FW107WWb08) firmware. Issue: a buffer overflow in function FUN_0001be68. Reported as potentially exploitable remotely to execute arbitrary code. Impacts include high risk as per CVE-2023-39671. Remediation: PT-2023-4469 recommends temporarily disabling the FUN...

PT-2023-4958 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack. This can be exploited by a remote attacker to cause a buffer overflow via the acStack 50 parameter. Recommendations: Fo...

PT-2023-4959 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack in the FUN 0000acb4 function of the D-Link DIR-868L router's firmware. This can be exploited by a remote attacker to cau...

PT-2023-4960 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L version fw revA 1-12 eu multi 20170316 Description: The issue is caused by a buffer overflow on the stack in the inet ntoa function. This can be exploited by a remote attacker to cause a buffer overflow. The buffer overflow...

PT-2023-4468 · D Link · D-Link Dir-880L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-880 A1 FW107WWb08 Description: The issue is related to a NULL pointer dereference in the FUN 00010824 function. This can potentially allow a remote attacker to cause a denial of service. Recommendations: For D-Link DIR-880 A1...

PT-2023-4453 · D Link · D-Link Dir-880L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-880 A1 FW107WWb08 Description: The issue is related to a buffer overflow in the fgets function of the D-Link DIR-880 router's firmware. This could allow a remote attacker to execute arbitrary code. Recommendations: For D-Link DIR-8...

dir-shop.cz Cross Site Scripting vulnerability OBB-3583761

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-5237 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-859 versions A1 1.05 through A1 1.06B01 Beta01 Description: The issue is related to a command injection vulnerability via the lxmldbc system function at the "/htdocs/cgibin" endpoint. This vulnerability is associated with the failu...

D-Link DIR-885L Authentication Bypass Vulnerability

The D-Link DIR-885L is a wireless router from China-based AUO D-Link. The D-Link DIR-885L suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in phpcgi, which can be exploited by an attacker to bypass authentication...

D-Link DIR-859 Authentication Bypass Vulnerability

The D-Link DIR-859 is a wireless router from China's AUO D-Link. The D-Link DIR-859 suffers from an authentication bypass vulnerability that stems from a lack of valid authentication in phpcgimain, which can be exploited by an attacker to bypass authentication...

D-Link DIR-895 Authentication Bypass Vulnerability

The D-Link DIR-895 is a wireless router from China's AUO D-Link. The D-Link DIR-895 suffers from an authentication bypass vulnerability that stems from the lack of valid authentication in the phpcgimain function in cgibin, which can be exploited by an attacker to bypass authentication...

The vulnerability of the phpcgi_main function in the D-Link DIR-859 router’s microprogramming system allows a hacker to increase their privileges.

The vulnerability of the phpcgimain function in the D-Link DIR-859 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

The vulnerability of the phpcgi_main function in the D-Link DIR-895 router’s microprogramming system allows a hacker to increase their privileges.

The vulnerability of the phpcgimain function in the D-Link DIR-895 router’s microprogramming system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36091

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36090

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...