The vulnerability of the /goform/form2systime.cgi microprogramming software for D-Link DIR-816 A2 routers allows a hacker to execute arbitrary commands.

The vulnerability of the /goform/form2systime.cgi microprogramming system for D-Link DIR-816 A2 exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

The vulnerability of the NTPSyncWithHost function in D-Link DIR-816 A2 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the NTPSyncWithHost function in D-Link DIR-816 A2 router microprogramming software exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

Design/Logic Flaw

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

D-Link DIR-300 安全漏洞

The D-Link DIR-300 is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-300 REVA1.06 and earlier firmware versions, REVB2.06 and earlier firmware versions, which originates from an easy file inclusion attack via /model/langmsg.php...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814

The CVE-2023-31814 entry concerns D-Link DIR-300 firmware and is tied to a file inclusion vulnerability in the script /model/__lang_msg.php. Affected devices are DIR-300 firmware versions <=REVA1.06 and

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814: Use of Incorrectly-Resolved Name or Reference

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

D-Link Multiple DIR Devices Multiple Vulnerabilities (Sep 2022)

Multiple D-Link DIR devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-2983 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 1.00A52 Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-846 router's firmware, specifically concerning the handling of the tomography ping address parameter. This can be...

The vulnerability of the SetClientInfoDemo.php script in D-Link DIR-868L router software allows a hacker to execute any command they desire.

The vulnerability of the SetClientInfoDemo.php script in the D-Link DIR-868L router microprogramming software exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute...

D-Link DIR-605L Stack Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L version 1.17B01 BETA suffers from a stack buffer overflow vulnerability due to incorrect boundary checking in /goform/formTcpipSetup. An attacker could exploit this vulnerability to cause a buffer overflow and...

CVE-2023-27233: Improper Neutralization of Special Elements used in an SQL Command

Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order0dir parameter at userlistbackend.php...

The vulnerability of D-Link DIR-819 router’s microprogramming software, related to improper cleaning or freeing of resources, allows a intruder to trigger a service failure.

The vulnerability of D-Link DIR-819 router’s microprogramming software is related to improper cleaning or freeing of resources. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted request from the...

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microsoftware allows a attacker to execute arbitrary code.

The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the PrefixLen parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router microprogramming software is related to insufficient checking of regular expressions during the processing of the uplink parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-2929 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 13.6.0 Description: The issue is related to a lack of validation of XML object sequences in the user list backend.php script of the Piwigo content management system. This can be exploited by a remote attacker to condu...