906 matches found
Design/Logic Flaw
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...
CVE-2024-24321
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...
CVE-2024-24321
CVE-2024-24321 affects D-Link DIR-816A2 v1.10CNB05. A vulnerability in the sub_42DA54 function’s wizardstep4_ssid_2 parameter enables remote code execution, exploitable over the network with no user interaction. Reported impact is arbitrary code execution, with high confidentiality, integrity, an...
CVE-2024-24321
An issue in Dlink DIR-816A2 v.1.10CNB05 allows a remote attacker to execute arbitrary code via the wizardstep4ssid2 parameter in the sub42DA54 function...
PT-2024-20357
Name of the Vulnerable Software and Affected Versions Dlink DIR-816A2 version 1.10CNB05 Description An issue allows a remote attacker to execute arbitrary code via the wizardstep4 ssid 2 parameter in the sub 42DA54 function. Recommendations For Dlink DIR-816A2 version 1.10CNB05, as a temporary...
CVE-2024-22852
D-Link Go-RT-AC750 GORTAC750A1FWv101b03 contains a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to enable telnet service via a specially crafted payload...
CVE-2024-22651
There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...
The vulnerability of the HNAP1 interface in D-Link DIR-822 microprogrammed router software allows a hacker to gain access to administrator accounts with empty passwords.
The vulnerability of the HNAP1 interface of D-Link DIR-822 microprogrammed router software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to access administrator accounts with empty passwords...
The vulnerability of the AWSFile component in the D-Link G416 router’s microprogramming software allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the AWSFile component in the D-Link G416 router microprogramming system exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with root...
The vulnerability of the flupl query_type function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the flupl querytype function in D-Link G416 router microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...
The vulnerability of the cfgsave upusb function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the cfgsave upusb function in D-Link G416 microprogrammed routers lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by connecting to port 80...
DLink DIR-859 < 1.07B03 Information Disclosure
The version of DLink installed on the remote host is prior to 1.07b03. It is, therefore, affected by an information disclosure vulnerability as referenced in the vendor advisory. A remote, unauthenticated attacker can explioit this exposure by sending a carefully crafted paypload with a...
DLink DIR-859 1.05 & 1.06B01 Multiple Vulnerabilities (RCE)
The version of DLink installed on the remote host is prior to 1.07b03. It is, therefore, affected by multiple remote code execution vulnerabilities as referenced in the vendor advisory. - The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an...
The vulnerability of the editrole.php component in the D-Link DAR-7000 router microprogramming system allows a hacker to execute arbitrary SQL code.
The vulnerability of the editrole.php component in the D-Link DAR-7000 router microprogramming system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...
The vulnerability of the /goform/formSetWanDhcpplus component of the D-Link N300 WI-Fi Router DIR-605L wireless access point software allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the /goform/formSetWanDhcpplus component in the D-Link N300 WI-Fi Router DIR-605L wireless access point lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary cod...
CVE-2023-44694
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php...
The vulnerability of the microprogramming software of the D-Link DAP-1325 wireless signal amplifier arises from incorrect neutralization of certain elements in the output data. This allows a hacker to execute arbitrary code.
The vulnerability of the microprogramming software of the D-Link DAP-1325 wireless signal amplifier is related to incorrect neutralization of certain elements in the output data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2023-45579
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...
CVE-2023-45575
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...