PT-2022-5728 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

PT-2022-31504

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31956

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A use-after-free issue was discovered in the ext4 file system, specifically in the ext4 rename dir prepare function. The actual impact and attack plausibility of this issue have not yet been...

PT-2022-31198

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A use-after-free issue was discovered in the ext4 file system, specifically in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven...

PT-2022-32107

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-30861

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32221

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a use-after-free in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-32310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description A use-after-free issue was discovered in the ext4 rename dir prepare function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

Command injection

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

CVE-2022-32092

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

EUVD-2022-53360

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

CVE-2022-32092

CVE-2022-32092 affects the D-Link DIR-645 router (v1.03) with a command injection vulnerability exposed through the QUERY_STRING parameter in the __ajax_explorer.sgi endpoint. Red Hat/OpenVAS/CVE aggregations and the NVD entry all describe this as a remote, unauthenticated, network-executable iss...

D-Link DIR-645 操作系统命令注入漏洞

The D-Link DIR-645 is a wireless router from China-based D-Link. An operating system command injection vulnerability exists in the D-Link DIR-645 v1.03, which originates from a command injection vulnerability in the QUERYSTRING parameter in the ajaxexplorer.sgi page...

CVE-2022-32092: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-645 v1.03 was discovered to contain a command injection vulnerability via the QUERYSTRING parameter at ajaxexplorer.sgi...

PT-2022-5532 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the implementation of the Home Network Administration Protocol HNAP in the D-Link DIR-1935 router's firmware, specifically with the authentication procedure. This allows a remo...

PT-2022-5534 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to bypass authentication on affected installations. The specific flaw exists within the handling of HNAP login requests, resulting from the lack of proper...

CVE-2018-18907

An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption...

Code injection

An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption...