Lucene search
+L

9826 matches found

BDU FSTEC
BDU FSTEC
•added 2022/09/26 12:00 a.m.•18 views

The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary commands.

The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers lies in the lack of measures taken to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8AI score0.01754EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/26 12:00 a.m.•12 views

The vulnerability of the anweb microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-2150 router’s microprogrammed software service is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00615EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/26 12:00 a.m.•13 views

The vulnerability of the anweb microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary code.

The vulnerability of the D-Link DIR-2150 router’s microprogrammed software service is related to buffer overflow on the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.00615EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/26 12:00 a.m.•18 views

The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary commands.

The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers lies in the lack of measures taken to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8AI score0.01578EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/09/26 12:00 a.m.•14 views

The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers allows a hacker to execute arbitrary commands.

The vulnerability of the xupnpd microprogramming software for D-Link DIR-2150 routers lies in the lack of measures taken to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8AI score0.01977EPSS
SaveExploits0References6Affected Software1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•84 views

D-Link DIR-2150 Buffer Overflow Vulnerability

D-Link DIR-2150 is a wireless router device from D-Link. D-Link DIR-2150c is vulnerable to a buffer overflow, which can be exploited by attackers to execute code in the root context...

8.8CVSS8.8AI score0.00615EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•53 views

D-Link DIR-2150 Operating System Command Injection Vulnerability

The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to execute code in the router context...

8.8CVSS9AI score0.01754EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•76 views

D-Link DIR-2150 Buffer Overflow Vulnerability (CNVD-2023-21662)

The D-Link DIR-2150 is a wireless router device from D-Link. The D-Link DIR-2150 is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to execute code in the root context...

8.8CVSS9AI score0.00615EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•19 views

D-Link DIR-2150 OS Command Injection Vulnerability

The D-Link DIR-2150 is an AC2100 specification wireless router that supports dual-band 2.4GHz and 5GHz wireless transmission, provides four Gigabit wired interfaces, and has a maximum theoretical transfer rate of up to 2100Mbps. The D-Link DIR-2150 suffers from an operating system command injecti...

8.8CVSS8.2AI score0.01977EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/09/19 12:00 a.m.•105 views

D-Link DIR-2150 OS Command Injection Vulnerability (CNVD-2023-21660)

The D-Link DIR-2150 is a wireless router device from D-Link.The D-Link DIR-2150 is vulnerable to an operating system command injection vulnerability that could be exploited by attackers to execute code in the context of a service account...

8.8CVSS9AI score0.01578EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•43 views

D-Link DIR-2150 anweb action_handler Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results...

8.8CVSS5.2AI score0.00615EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•40 views

D-Link DIR-2150 xupnpd Dreambox Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd service, which listens on TCP...

8.8CVSS4.8AI score0.01754EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•35 views

D-Link DIR-2150 xupnpd_generic Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpdgeneric.lua plugin for the xupnpd service, which listens...

8.8CVSS5.4AI score0.01578EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•40 views

D-Link DIR-2150 xupnpd ui_upload Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044 by default. The...

8.8CVSS5AI score0.01977EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2022/09/14 12:00 a.m.•37 views

D-Link DIR-2150 anweb websocket_data_handler Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the anweb service, which listens on TCP ports 80 and 443 by default. The issue results...

8.8CVSS5.2AI score0.00615EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2022/09/13 8:22 p.m.•14 views

Exploit for Uncontrolled Resource Consumption in Dlink Dir-819_Firmware

CVE-2022-40946 Exploit: Unauthenticated Denial of Service in D...

7.5CVSS7.3AI score0.07516EPSS
SaveExploits5
OSV
OSV
•added 2022/09/13 7:36 a.m.•60 views

RLSA-2022:6449 Moderate: nodejs:16 security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs-ansi-regex: Regular expression denial of service ReDoS matching ANSI escape codes CVE-2021-3807 nodejs: DNS rebinding in --inspect via...

7.5CVSS7.4AI score0.81832EPSS
SaveExploits4References8
OSV
OSV
•added 2022/09/13 12:00 a.m.•47 views

ALSA-2022:6448 Moderate: nodejs:14 security and bug fix update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: DNS rebinding in --inspect via invalid IP addresses CVE-2022-32212 nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encodi...

8.1CVSS7.4AI score0.81832EPSS
SaveExploits3References12
NVD
NVD
•added 2022/09/08 6:15 p.m.•31 views

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

8.1CVSS0.01429EPSS
SaveExploits1References2
OSV
OSV
•added 2022/09/08 6:15 p.m.•11 views

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

8.1CVSS5.8AI score0.01429EPSS
SaveExploits1References2
Rows per page
Query Builder