Command injection

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

D-Link DIR-859 操作系统命令注入漏洞

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...

CVE-2022-46476

CVE-2022-46476 affects the D-Link DIR-859 A1 firmware (1.05). The issue is a command-injection vulnerability in the router’s soapcgi_main function, exploitable via the service= parameter due to inadequate input sanitization in the management interface. This could enable a remote attacker to execu...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

D-Link DIR-3040 MiniDLNA Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MiniDLNA service. The issue results from the lack of proper...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

Stack overflow

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

GSD-2023-1000441 ext4: disable fast-commit of encrypted dir operations

ext4: disable fast-commit of encrypted dir operations This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...

PT-2023-33821 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: A potential memory leak issue exists in the configfs create dir function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2023-33564 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the ext2 empty dir function in the Linux Kernel. It was introduced in version v5.19 and fixed in version v6.0.18. The actual impact and attack plausibility have not y...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

CVE-2022-46475

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

D-LINK DIR 645A1 缓冲区错误漏洞

The D-LINK DIR 645A1 is a wireless router from China-based AUO D-LINK. The D-LINK DIR 645A1 1.06B01Beta01 suffers from a buffer error vulnerability that originates from a stack overflow via the service= variable in the genacgimain function...

CVE-2022-46475: Out-of-bounds Write

D-Link DIR 645A1 1.06B01Beta01 was discovered to contain a stack overflow via the service= variable in the genacgimain function...

CVE-2022-46475

CVE-2022-46475 affects D-Link DIR-645A1 (DIR-645) firmware 1.06B01_Beta01, with a stack overflow in the genacgi_main function triggered via the service= parameter. The vulnerability arises from memory corruption in the affected CGI handling, enabling a remote attacker to potentially crash or take...

CVE-2015-10030: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The patch is...

The vulnerability of the FsCreateDir function in the Ajax web interface for managing WLAN client software Hirschmann BAT-C2 allows a hacker to execute arbitrary commands.

The vulnerability of the FsCreateDir function in the Ajax web interface for managing WLAN client software Hirschmann BAT-C2 is related to insufficient checking of arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using the dir...