PT-2023-4086 · D Link · D-Link Dir-885L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-885L version FW102b01 Description: The issue is related to an Authentication Bypass vulnerability that allows remote attackers to gain escalated privileges via phpcgi. This vulnerability only affects products that are no longer...

PT-2023-4037 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-Link DIR-859 versions FW105b03 Description: The issue is related to an authentication bypass in the D-Link DIR-859 router's firmware, specifically affecting the phpcgi main function. This allows remote attackers to gain escalated privileges...

PT-2023-4061 · D Link · D-Link Dir-895

Name of the Vulnerable Software and Affected Versions: D-Link DIR-895 version FW102b07 Description: The issue is related to a function called phpcgi main in the D-Link DIR-895 router's firmware, which has weaknesses in its authentication procedure. This can be exploited by a remote attacker to ga...

CVE-2023-36090: Incorrect Authorization

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

D-Link DIR-859 安全漏洞

The D-Link DIR-859 is a wireless router from China's AUO D-Link. The D-Link DIR-859 suffers from an authentication bypass vulnerability that stems from a lack of valid authentication in phpcgimain, which can be exploited by an attacker to bypass authentication...

CVE-2023-36091

The CVE-2023-36091 entry concerns D-Link DIR-895 router firmware FW102b07, where the phpcgi_main function in cgibin suffers an authentication bypass that allows remote attackers to escalate privileges. Multiple sources corroborate a remote-network-attack scenario with a high-severity impact (C/H/...

CVE-2023-36092

CVE-2023-36092 affects D-Link DIR-859 router firmware FW105b03 and is disclosed across multiple sources (NVD, CNVD, Red Hat, CNVD, OpenVAS). The vulnerability is described as an authentication bypass in the phpcgi_main component, enabling remote attackers to achieve escalated privileges. Reported...

CVE-2023-36091: Incorrect Authorization

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36092: Incorrect Authorization

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36089

CVE-2023-36089 concerns a remote authentication bypass in D-Link DIR-645, firmware 1.03, via the phpcgi_main function in cgibin. The Red Hat/NVD entries describe an attacker gaining escalated privileges without user interaction. The issue is tied to products that are no longer supported, and no o...

CVE-2023-36090

CVE-2023-36090 describes an Authentication Bypass in the D-Link DIR-885L (FW102b01) where lack of valid authentication in phpcgi allows remote attackers to escalate privileges. Affected product: D-Link DIR-885L; vulnerability type: authentication bypass via phpcgi; impact: remote, unauthenticated...

The vulnerability of the lxmldbc_system() function in D-Link DIR-600 B5 router software allows for the execution of arbitrary commands.

The vulnerability of the lxmldbcsystem function in D-Link DIR-600 B5 router microprogramming software is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

dir-shop.cz Cross Site Scripting vulnerability OBB-3540212

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

D-Link DIR-619 Buffer Overflow Vulnerability (CNVD-2023-65129)

The D-Link DIR-619 is a series of routers from the Chinese company AUO D-Link. A buffer overflow vulnerability exists in D-Link DIR-619L v2.04TW, which stems from the curTime parameter of /goform/formLogin failing to correctly validate the length size of the input data, and can be exploited by a...

Medium: zstd

Issue Overview: In zstd, supplying an empty string as an argument to either --output-dir-flat or --output-dir-mirror may cause a buffer overrun. CVE-2022-4899 Affected Packages: zstd Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

CVE-2023-37758

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

Buffer overflow

D-LINK DIR-815 v1.01 was discovered to contain a buffer overflow via the component /web/captcha.cgi...

dir-shop.cz Cross Site Scripting vulnerability OBB-3527321

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...