CVE-2024-10914-Exploit

CVE-2024-10914-Exploit CVE-2024-10914는 D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L버전 20241028까지에 영향을 미치는 치명적인 취약점입니다. 파일 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd 내의 함수 cgiuseradd가 원인으로, 공격자가 원격으로 운영 체제 명령을 주입할 수 있게 합니다. 스크립트 사용법: './cve-2024-10914-exploit.sh -u -c '...

CVE-2024-10914

cve-2024-10914 Exploit para cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Versión 1.00, Versión 1.01.0914.2012, Versión 1.01, Versión 1.02, Versión 1.08 Inyección de comandos...

CVE-2024-10914

CVE-2024-10914 D-Link DNS-320, DNS-320LW, DNS-325 및 DNS-340L 20241028까지에서 취약점이 발견되었습니다. 해당 취약점은 심각critical으로 분류되었습니다. 이 취약점의 영향을 받는 부분은 /cgi-bin/accountmgr.cgi?cmd=cgiuseradd 파일의 cgiuseradd 함수입니다. name 인수의 조작을 통해 OS 명령어 주입OS command injection이 발생합니다. 이 공격은 원격으로 수행될 수 있습니다. 공격의 복잡성은 상당히 높으며, 익스플로잇...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- Это программа для обнаружения RCE-уязвимости D-Link. Краткое описание уязвимости D-Link DNS-320 и другие являются устройствами NAS сетевое хранилище компании D-Link Китай. В нескольких продуктах D-Link существует уязвимость безопасности, вызванная неправильной обработко...

CVE-2026-16447

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

EUVD-2026-46258

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-16447

CVE-2026-16447 concerns a vulnerability in the D-Link DNS-320 1.0.2 where the argument Filedata[] in /web/jquery/uploader/multi_uploadify.php can be manipulated to achieve unrestricted upload. Remote exploitation is possible according to the provided records. The affected component is a server-si...

CVE-2026-16447 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-16332

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

EUVD-2026-46143

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

CVE-2026-16332

CVE-2026-16332 affects D-Link DNS-320 with firmware 1.0.2. The vulnerability resides in the file /mydlink/multi_uploadify.php; manipulating the argument Filedata[] enables unrestricted upload. This can be exploited remotely, and the exploit is public and may be used. The connected documents provi...

CVE-2026-16332

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

CVE-2026-16332 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

CVE-2026-16330

A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...

CVE-2026-16331

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

CVE-2026-16331

The CVE-2026-16331 entry concerns D-Link DNS-320 firmware 1.0.2. The vulnerability affects the file /web/function/save_ajax.php, where manipulation of an argument in the Malicious Handler can lead to unrestricted file upload. Exploitation is possible remotely, and public disclosure of the exploit...

CVE-2026-16331 D-Link DNS-320 save_ajax.php unrestricted upload

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

CVE-2026-16331

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...