CVE-2022-36786

DLINK - DSL-224 Post-auth RCE. DLINK router version 3.0.8 has an interface where you can configure NTP servers Network Time Protocol via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router...

CVE-2024-57595

DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apcclientpin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wpspin" passed to the apcclientpin.cgi binary through a POST request...

CVE-2024-57595

CVE-2024-57595 affects D-Link DIR-825 REVB v2.03. The issue is an OS command injection in the CGl interface apc_client_pin.cgi, exploitable remotely by sending a crafted wps_pin parameter via POST to apc_client_pin.cgi, allowing arbitrary command execution. Impact is high (remote, unauthenticated...

CVE-2024-57595

DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apcclientpin.cgi, which allows remote attackers to execute arbitrary commands via the parameter "wpspin" passed to the apcclientpin.cgi binary through a POST request...

The vulnerability of the /sbin/httpd file in D-Link DIR-860L router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the /sbin/httpd microprogramming system of D-Link DIR-860L routers is related to errors in pointer assignment due to incorrect checking of HTTP request formats. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted HTTP...

The vulnerability of the formResetStatistic() function in D-Link DIR-605L router software allows a hacker to induce a service failure.

The vulnerability of the formResetStatistic function in D-Link DIR-605L router microprogramming software is related to the issue where the operation’s output escapes the buffer in memory when processing the curTime parameter. Exploiting this vulnerability allows a malicious actor to cause a servi...

The vulnerability of the file loading function of the configuration module for D-Link DWR 2000M VPN microprogramming router allows a hacker to perform cross-site scripting attacks.

The vulnerability of the file loading function for the configuration module of D-Link DWR 2000M routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks by loading a specially created...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from D-Link that supports a variety of network connections and security settings. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates in the file /goform/formResetStatistic parameter curTime, no details of the vulnerability are...

Exploit for Improper Neutralization in Dlink Dns-320_Firmware

CVE-2024-10914 - D-Link Remote Code Execution RCE This repo...

CVE-2024-52757

D-LINK DI-8003 v16.07.16A1 was discovered to contain a buffer overflow via the notify parameter in the arpsysasp function...

The vulnerability of the upgrade_filter_asp function in the /upgrade_filter.asp file of the D-Link DI-8003 router’s microprogramming system, allowing a hacker to execute arbitrary commands.

The vulnerability of the upgradefilterasp function in the /upgradefilter.asp file of the D-Link DI-8003 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-28730

Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via the file upload feature of the VPN configuration module...

CVE-2024-28726

An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to execute arbitrary code via a crafted payload to the Diagnostics function...

CVE-2024-28731

Cross Site Request Forgery vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via the Port forwarding option...

CVE-2024-28730

Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via the file upload feature of the VPN configuration module...

CVE-2024-28728

Cross Site Scripting vulnerability in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to obtain sensitive information via a crafted payload to the WiFi SSID Name field...

CVE-2024-28729

An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to execute arbitrary code via a crafted request...

CVE-2024-28729

An issue in DLink DWR 2000M 5G CPE With Wifi 6 Ax1800 and Dlink DWR 5G CPE DWR-2000M1.34ME allows a local attacker to execute arbitrary code via a crafted request...

CVE-2024-28728

CVE-2024-28728 describes a Cross Site Scripting vulnerability in D-Link DWR-2000M 5G CPE with Wi-Fi 6 Ax1800 and D-Link DWR-2000M_1.34ME. The issue arises from handling of the WiFi SSID Name field, allowing a local attacker to obtain sensitive information via a crafted payload. Affected product/v...

CVE-2024-28731

CVE-2024-28731 describes a Cross Site Request Forgery in the D-Link DWR-2000M 5G CPE family (DWR 2000M 5G CPE with Wi‑Fi 6 Ax1800; D-Link DWR-2000M_1.34ME). The vulnerability allows a local attacker to obtain sensitive information via the Port Forwarding option. Documentation consistently identif...