CVE-2023-43284

CVE-2023-43284 DLink Model DIR-846 аутентифицированное удаленное выполнение кода. Эта уязвимость использует параметр POST QoS в маршрутизаторе для эксплуатации аутентифицированного удаленного выполнения кода. Не требует, чтобы QoS был включен! -h, --help show this help message and exit -x ,...

Exploit for CVE-2023-43284

CVE-2023-43284 DLink Model DIR-846 Authenticated Remote Code E...

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

CVE-2019-17509

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php...