CVE-2023-43284

CVE-2023-43284 DLink Modell DIR-846 Authentifizierte Remote-Code-Ausführung. Diese Schwachstelle missbraucht den QoS-POST-Parameter im Router, um eine authentifizierte Remote-Code-Ausführung auszunutzen. Erfordert nicht, dass QoS aktiviert ist! root@kitploit: -h, --help show this help message and...

Exploit for CVE-2023-43284

CVE-2023-43284 DLink Model DIR-846 Authenticated Remote Code E...

The vulnerabilities of the DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 allow a hacker to execute arbitrary commands.

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

CVE-2019-17509

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php...