Lucene search
+L

9793 matches found

Prion
Prion
•added 2022/03/04 10:15 p.m.•34 views

Information disclosure

An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of different absolute paths that are being used by the web application...

5CVSS5.4AI score0.0217EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/03/04 9:13 p.m.•40 views

CVE-2021-46353

An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of different absolute paths that are being used by the web application...

5.7AI score0.0217EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/04 9:13 p.m.•114 views

CVE-2021-46353

CVE-2021-46353 affects D-Link DIR-X1860 web interface prior to 1.03 RevA1. Multiple connected sources describe an information-disclosure vulnerability: an unauthenticated remote attacker can send a crafted HTTP request to enumerate absolute paths used by the web application, exposing server-side ...

5.3CVSS5.3AI score0.0217EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/03/04 8:15 p.m.•11 views

CVE-2022-25106

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

7.1CVSS6.3AI score0.08588EPSS
SaveExploits1References4
NVD
NVD
•added 2022/03/04 8:15 p.m.•32 views

CVE-2022-25106

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

7.1CVSS0.08588EPSS
SaveExploits1References3
OSV
OSV
•added 2022/03/04 8:15 p.m.•7 views

CVE-2022-25106

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

5.5CVSS6.2AI score0.08588EPSS
SaveExploits1References3
Prion
Prion
•added 2022/03/04 8:15 p.m.•21 views

Stack overflow

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

7.1CVSS5.6AI score0.08588EPSS
SaveExploits1References3Affected Software2
CVE
CVE
•added 2022/03/04 7:20 p.m.•130 views

CVE-2022-25106

The CVE-2022-25106 entry concerns D-Link DIR-859 with firmware v1.05, where a stack-based buffer overflow in the function genacgi_main is exploitable to trigger a Denial of Service via a crafted payload. Affected product is the D-Link DIR-859 router; impact as stated is DoS (availability), with C...

7.1CVSS5.6AI score0.08588EPSS
SaveExploits1References3Affected Software1
Openbugbounty
Openbugbounty
•added 2022/03/04 1:32 p.m.•11 views

dir-ger.de Improper Access Control vulnerability OBB-2405683

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•3 views

CVE-2021-46353: Generation of Error Message Containing Sensitive Information

An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of different absolute paths that are being used by the web application...

5.3CVSS6AI score0.0217EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/04 12:00 a.m.•11 views

PT-2022-2079 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850 versions ET850-1.08TRb03 Description: The issue is related to errors in loading configuration files in the D-Link DIR-850 router's firmware. It allows a remote attacker to redirect users to an arbitrary URL due to an incorrect...

7.5CVSS7.4AI score0.31863EPSS
SaveExploits4References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•4 views

CVE-2022-25106: Out-of-bounds Write

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

7.1CVSS6.5AI score0.08588EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/04 12:00 a.m.•14 views

D-Link DIR-859 缓冲区错误漏洞

The D-Link DIR-859 is a wireless router from D-Link, Taiwan, China.A security vulnerability exists in the D-Link DIR-859 v1.05, which stems from the function genacgimain containing a stack-based buffer overflow. An attacker could exploit this vulnerability to trigger a denial of service DoS via a...

7.1CVSS6.1AI score0.08588EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/28 12:00 a.m.•4 views

CVE-2022-25412: Improper Limitation of a Pathname to a Restricted Directory

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

8.1CVSS7.6AI score0.01059EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•15 views

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands using a...

10CVSS8.1AI score0.06573EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•49 views

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands using a...

10CVSS8.1AI score0.33287EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2022/02/25 12:00 a.m.•14 views

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.06573EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2022/02/22 12:00 a.m.•18 views

The vulnerability of Wi-Fi router microprogramming software web applications of D-Link DIR-X1860 allows a intruder to trigger a service failure.

The vulnerability of the web-based application of D-Link DIR-X1860 wireless routers is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created web page...

7.4CVSS7.2AI score0.01657EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/22 12:00 a.m.•14 views

The vulnerability of the web-based application of D-Link DIR-X1860 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the web application of D-Link DIR-X1860 Wi-Fi routers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created website...

6.4CVSS6.8AI score0.01898EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/02/22 12:00 a.m.•12 views

The vulnerability of the web application of D-Link DIR-X1860 microprogramming software allows a hacker to send hidden HTTP requests (HTTP Request Smuggling attack).

The vulnerability of the web application developed with microprogramming software for D-Link DIR-X1860 is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests HTTP Request Smuggling attack using specially created...

7.8CVSS7.2AI score0.03712EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder