D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- これはD-Link RCE脆弱性検出プログラムです 脆弱性概要 D-Link DNS-320などは、中国のD-Link社製NAS（ネットワーク接続ストレージ）デバイスです。 D-Linkの複数製品にセキュリティ脆弱性が存在します。この脆弱性は、パラメータnameに対する誤った操作がOSコマンドインジェクションを引き起こすことに起因します。以下の製品およびバージョンが影響を受けます：D-Link DNS-320、DNS-320LW、DNS-325、DNS-340L 20241028以前のバージョン ネットワークスキャン...

CVE-2024-10914

cve-2024-10914 cve-2024-10914 のエクスプロイト: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 コマンドインジェクション...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

CVE-2024-10914-EXPLOIT

CVE-2024-10914 - D-Link リモートコード実行（RCE） このリポジトリには、D-Link NAS デバイスに影響する重大な脆弱性の概念実証（PoC）エクスプロイトが含まれています。CVE-2024-10914 として追跡されているこのバグは、次のモデルに影響します： D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325 D-Link DNS-340L この脆弱性は、/cgi-bin/accountmgr.cgi スクリプトの一部である cgiuseradd という関数に存在します。 このバグは、システムコマンドで使用される前に...

CVE-2024-10914

CVE-2024-10914 D-Link DNS-320、DNS-320LW、DNS-325、DNS-340L（20241028 までのバージョン）に脆弱性が見つかりました。これは critical と評価されています。この脆弱性の影響を受けるのは、ファイル /cgi-bin/accountmgr.cgi?cmd=cgiuseradd 内の関数 cgiuseradd です。引数 name を操作すると、OS...

CVE-2024-10914-Exploit

CVE-2024-10914-Exploit CVE-2024-10914は、D-Link DNS-320、DNS-320LW、DNS-325、DNS-340L（バージョン20241028まで）に影響する重大な脆弱性です。ファイル/cgi-bin/accountmgr.cgi?cmd=cgiuseradd内の関数cgiuseraddが原因であり、攻撃者がリモートからオペレーティングシステムコマンドを注入することを可能にします。 スクリプトの使用方法: './cve-2024-10914-exploit.sh -u -c '...

The vulnerability of the /cgi/file_sharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

EUVD-2026-70768

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

CVE-2026-85224

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

CVE-2026-85224 D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

CVE-2026-85224

CVE-2026-85224 is an OS command injection vulnerability in the File Sharing component of D-Link DNS-320 ShareCenter (firmware 2.06B01), specifically in /cgi/file_sharing.cgi. Manipulation of the fileurl argument allows a remote attacker to execute arbitrary commands. The CVSS 3.1 score is 9.1 (CR...

CVE-2026-85224 D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

PT-2026-85265

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/file sharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit h...

CVE-2026-85224: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was determined in D-Link DNS-320 ShareCenter 2.06B01. This affects an unknown part of the file /cgi/filesharing.cgi of the component File Sharing. Executing a manipulation of the argument fileurl can lead to os command injection. The attack can be launched remotely. The exploit ha...

D-Link DNS_340L Command Injection

Proof of concept exploit for a remote command injection vulnerability in various D-Link models. Exploit Title: D-Link DNS340L - OS Command Injection Date: 2026-07-16 Exploit Author: Jared Brits K3ysTr0K3R Vendor Homepage: https://www.dlink.com/ Version: DNS-320 v1.00, DNS-320LW v1.01.0914.2012,...

D-Link DNS_340L - OS Command Injection

Exploit Title: D-Link DNS340L - OS Command Injection Date: 2026-07-16 Exploit Author: Jared Brits K3ysTr0K3R Vendor Homepage: https://www.dlink.com/ Version: DNS-320 v1.00, DNS-320LW v1.01.0914.2012, DNS-325 v1.01, v1.02, DNS-340L v1.08, and possibly others Tested on: D-Link DNS-320 CVE:...

CVE-2026-16447

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

EUVD-2026-46258

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-16447 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...