CVE-2022-35619

D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function ssdpcgimain...

D-Link DIR-820L 安全漏洞

The D-Link DIR-820L is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-820LA1FW106B02, which stems from the nextPage parameter of its ping.ccp component that can lead to a denial of service due to a buffer overflow...

CVE-2022-35619: Undefined Security Weakness

D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function ssdpcgimain...

CVE-2022-35620: Undefined Security Weakness

D-LINK DIR-818LW A1:DIR818LFW105b01 was discovered to contain a remote code execution RCE vulnerability via the function binary.soapcgimain...

D-Link DIR-818LW 安全漏洞

The D-Link DIR-818LW is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-818LW A1:DIR818LFW105b01, which originates from the inclusion of a Remote Code Execution RCE vulnerability via the function ssdpcgimain...

D-Link DIR-818LW 安全漏洞

The D-Link DIR-818LW is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-818LW A1:DIR818LFW105b01, which originates from the inclusion of a Remote Code Execution RCE vulnerability via the function binary.soapcgimain...

D-Link DIR-820L 命令注入漏洞

The D-Link DIR-820L is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-820LA1FW102B22, which stems from its Pingaddr function that can lead to command injection...

PT-2022-4519 · D Link · D-Link Dir-818Lw

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-818LW versions DIR818L FW105b01 Description: The issue is related to errors in the code of the binary.soapcgi main function in the D-LINK DIR-818LW router's firmware. This can allow a remote attacker to execute arbitrary code. The...

PT-2022-4530 · D Link · D-Link Dir-818Lw

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-818LW version DIR818L FW105b01 Description: The issue is related to a remote code execution vulnerability via the ssdpcgi main function. This vulnerability is associated with coding errors in the firmware of D-LINK DIR-818LW router...

PT-2022-5529 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

PT-2022-5536 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

PT-2022-5530 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the SetQoSSettings function in the web management interface of D-Link DIR-1935 routers, which fails to properly clean input data in the user-supplied string when processing the...

PT-2022-5531 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

PT-2022-5541 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this, the existing authentication mechanism can be...

PT-2022-5540 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling of...

dir-shop.cz Cross Site Scripting vulnerability OBB-2806519

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-5533 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the handling of SetStaticRouteIPv4Settings requests in the web management portal, specifically when parsing subelements within the StaticRouteIPv4Data element. The process does...

PT-2022-5535 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the SetIPv4FirewallSettings function in the web management interface of D-Link DIR-1935 routers, which fails to properly clean input data in a user-supplied string when handlin...

The vulnerability of the WPA algorithm implementation in D-Link DIR-850L A router software allows a hacker to circumvent security restrictions.

The vulnerability of the WPA algorithm implementation in D-Link DIR-850L router software is related to an improperly implemented authentication mechanism. Exploiting this vulnerability allows a hacker to circumvent security restrictions by sending specially created packets...

The vulnerability in the implementation of the sprintf() function in the microprogramming software for DIR-890L A1 allows a hacker to execute arbitrary code.

The vulnerability of the sprintf function implementation in the microprogramming-based router software DIR-890L A1 is related to incorrect checking of string lengths in HTTP headers. Exploiting this vulnerability could allow an attacker to execute arbitrary code by connecting through port 49152...