171 matches found
CVE-2024-57376
CVE-2024-57376 Pre-auth 远程代码执行漏洞，针对 D-Link DSR-250 和 DSR-250N 安全公告：https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 用法 root@kitploit: $ python3 exploit.py usage: 示例 root@kitploit: $ python3 exploit.py 192.168.1.1 443 id + fingerprint device: DSR-250N year : 2021...
DRA_writeup
Oracle DSR 中的安全漏洞 KPN CISO REDteam KPN 是位于荷兰的一家电信运营商。CISO REDteam 成立于 2013 年，是 KPN 的伦理黑客团队。该团队负责对 KPN 的应用程序和服务进行安全测试，以确保我们客户的数据免遭未经授权的访问、修改和数据丢失。 直径路由代理背景 KPN 运营着荷兰最大的移动网络。KPN 运营的 4G 网络组件之一是基于 Oracle 直径信令路由器 DSR 应用程序的直径路由代理。直径路由代理 DRA 是 3G 或 4G 网络中的一个功能元素，提供实时路由能力，以确保消息在网络中的正确元素之间路由。3GPP 引入了...
CVE-2025-60344
A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...
CVE-2025-60344
A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...
EUVD-2025-35178
An unauthenticated Local File Inclusion LFI vulnerability in D-Link DSR series routers allows remote attackers to retrieve sensitive configuration files in clear text. The exposed files contain administrative credentials, VPN settings, and other sensitive information, enabling full administrative...
D-Link DSR-150 安全漏洞
D-Link DSR-150 is a Unified Services Router from China AUO D-Link. A security vulnerability exists in the D-Link DSR-150 v1.09B32WWW, which stems from an unauthenticated local file inclusion vulnerability that could allow a remote attacker to gain access to sensitive configuration files in...
CVE-2025-60344
A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...
CVE-2025-60344
A path traversal directory traversal vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate input parameters used for file or directory path resolution e.g., via sequences such as “../”. Successful exploitation may allow access to files outside of the...
CVE-2025-60344
CVE-2025-60344 describes a path traversal vulnerability in the D-Link DSR series (DSR-150, DSR-150N, DSR-250N v1.09B32_WW). Unauthenticated remote attackers can manipulate file/directory path resolution (e.g., via “../”) due to insufficient input validation, potentially exposing sensitive system ...
EUVD-2012-6459
Malware in sbrugna...
EUVD-2013-5778
Malware in sbrugna...
EUVD-2020-18408
Malware in sbrugna...
EUVD-2012-6460
Malware in sbrugna...
EUVD-2020-18409
Malware in sbrugna...
Malicious code in @zalastax/nolb-_dsr-rollback-a (npm)
The package @zalastax/nolb-dsr-rollback-a was found to contain malicious code...
Malicious code in @zalastax/nolb-_dsr-rollback-org-l (npm)
The package @zalastax/nolb-dsr-rollback-org-l was found to contain malicious code...
MAL-2025-42991 Malicious code in @zalastax/nolb-_dsr-rollback-org-k (npm)
The package @zalastax/nolb-dsr-rollback-org-k was found to contain malicious code...
MAL-2025-42990 Malicious code in @zalastax/nolb-_dsr-rollback-org-j (npm)
The package @zalastax/nolb-dsr-rollback-org-j was found to contain malicious code...