906 matches found
CVE-2023-32144
D-Link DAP-1360 webproc COMMMakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this...
CVE-2023-32146
D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. T...
CVE-2023-32139
D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...
CVE-2023-32138
D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific...
D-Link DAP-1325 安全漏洞
D-Link DAP-1325 is a wireless access point/bridge made by D-Link, which is mainly used to extend the wireless network coverage, support the conversion of wired network to wireless network or connect different wireless networks. The D-Link DAP-1325 suffers from a command injection vulnerability th...
D-Link G416 安全漏洞
D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 , which supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a command injection vulnerability that stems from the awsfile tar file handling command...
D-Link DCS-8300LHV2 安全漏洞
The D-Link DCS-8300LHV2 is a webcam from China AUO D-Link. A security vulnerability exists in the D-Link DCS-8300LHV2 that stems from an ONVIF hard-coded PIN authentication bypass vulnerability...
CVE-2024-33344
D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...
PT-2024-3330 · D Link · D-Link Dir-845L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and earlier Description: The issue is related to a Cross Site Scripting XSS vulnerability via the /htdocs/webinc/js/bsc sms inbox.php endpoint. This vulnerability is associated with the failure to...
Exploit for Command Injection in Dlink Dns-320L_Firmware
🛠️ CVE-2024-3273 Exploit Tool 🌟 Introduction This script...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are greater than available ram. Ftp server allows change of directory to root which is one level up tha...
CVE-2024-27619
The CVE-2024-27619 entry concerns D-Link Dir-3040us A1 (firmware 1.20b03a hotfix). The issue is a buffer overflow caused by a read/write FTP server path that allows uploading files larger than available RAM, leading to RAM exhaustion and a system crash/reboot. The FTP service permits changing the...
The vulnerability of the sub_41D354() function in D-Link DIR-823G router’s software allows a hacker to execute arbitrary code or cause malfunctions during maintenance.
The vulnerability of the sub41D354 function in D-Link DIR-823G router’s microprogramming system is related to the issue where the operation’s output escapes the buffer in memory when processing the soapaction parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-882 A1 wireless router software allows a attacker to escalate their privileges and execute arbitrary commands.
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-882 A1 wireless routers’ microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to enhanc...
The vulnerability of D-Link DIR-816 A2 wireless routers’ microprogramming software lies in the fact that the operation is performed outside the buffer in memory. This allows attackers to enhance their privileges and execute arbitrary commands.
The vulnerability of the microprogrammed software of D-Link DIR-816 A2 wireless routers is related to the escape from the buffer boundaries in memory, resulting from the failure to take measures to neutralize special elements used in the operating system’s command for processing the urladd...
CVE-2023-24330
Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1FW130B06 allows attackers to run arbitrary commands via crafted POST request to /HNAP1/...
DLink DIR-610 Multiple Vulnerabilities
The version of DLink installed on the remote host is unsupported and affected by multiple vulnerabilities as referenced in the vendor advisory. - D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php - D-Link DIR-610 devices allow Information Disclosure via...