9639 matches found
Authentication flaw
D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...
CVE-2019-16327
D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...
CVE-2019-16327
CVE-2019-16327 affects the D-Link DIR-601 B1 router (version 2.00NA). The vulnerability is an authentication bypass where the device does not enforce authentication on the server side, relying on client-side validation, which is bypassable. It is documented alongside a related CSRF issue (CVE-201...
CVE-2019-16326
CVE-2019-16326 affects the D-Link DIR-601 B1 (firmware 2.00NA). It describes a CSRF vulnerability due to absence of an anti‑CSRF token, enabling potential remote router management when combined with CVE-2019-16327. The end‑of‑life DIR‑601 B1 is noted in the entry. The connected documents also ref...
CVE-2019-16326
D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...
CVE-2019-16326: Cross-Site Request Forgery (CSRF)
D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...
The vulnerability of the ext4_empty_dir function (fs/ext4/namei.c) in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4emptydir function fs/ext4/namei.c in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...
CVE-2019-16327: Improper Authentication
D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...
D-Link DIR-601 CVE-2019-16327 Authentication Bypass Vulnerability
Description D-Link DIR-601 is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks. D-Link DIR-601 Router 2.00NA is vulnerable; other versions may also be affected...
D-Link DIR-859 Unauthenticated Remote Command Execution
D-Link DIR-859 Routers are vulnerable to OS command injection via the UPnP interface. The vulnerability exists in /gena.cgi function genacgimain in /htdocs/cgibin, which is accessible without credentials. Module Options msf use exploit/linux/upnp/dlink/dir859subscribeexec msf...
D-Link DIR-601 B1 CVE-2019-16326 Cross Site Request Forgery Vulnerability
Description D-Link DIR-601 B1 is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. D-Link DIR-601 B1 2.00NA is vulnerable; other versions may...
D-Link DIR-859 Routers CVE-2019-20213 Information Disclosure Vulnerability
Description D-Link DIR-859 routers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information and perform unauthorized actions. Versions prior to D-Link DIR-859 1.07b03beta are vulnerable. Technologies Affected D-Link DIR-859 1.05 D-Link...
CVE-2019-19742
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
CVE-2019-19742
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
Cross site scripting
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
CVE-2019-19742
CVE-2019-19742 affects D-Link DIR-615 routers, where the User Account Configuration page is vulnerable to blind XSS via the name field. Connected sources substantiate a lack of proper input validation on the web UI leading to client-side script execution; exploitation steps reported include inser...
D-Link DIR-615 Authorization Issues Vulnerability
D-Link DIR-615 is a small wireless router product from AUO D-Link. The D-Link DIR-615 is vulnerable to an authorization issue. An attacker can exploit this vulnerability by sniffing network traffic to obtain the IP address of the user and the router, or even obtain a public IP address and take ov...
CVE-2019-19742: Improper Neutralization of Input During Web Page Generation
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
D-Link DIR-615 Input Validation Error Vulnerability
The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-615 suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to create a root admin user...