CVE-2018-8941

CVE-2018-8941：D-Link DSL-3782 代码执行（概念验证） Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys 缓冲区溢出漏洞发现于 /userfs/bin/tcapi 二进制文件中，该文件在 Web GUI 中作为“诊断”功能的包装器。 认证用户可以通过 set DiagnosticsEntry 函数向 /user/bin/tcapi 二进制文件传递一个过长的缓冲区作为 'Addr' 参数，从而导致内存损坏。...

CVE-2023-27216

CVE-2023-27216 - DLink 路由器 本文档记录了我——一名固件逆向与漏洞利用新手——的个人经验。 范围 为了演示，我们将分析并复现 CVE-2023-27216。 CVE 编号： CVE-2023-27216 漏洞描述： D-Link DSL-3782 v.1.03 中存在的一个问题允许远程认证用户通过网络设置页面以 root 身份执行任意代码。 设备型号： D-Link DSL-3782 固件版本： DSL-3782A1EU1.01 制造商官网： http://www.dlink.com.cn/ 固件地址：...

CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

このリポジトリには README がありません。...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

このリポジトリには README がありません。...

EUVD-2018-2819

Malware in sbrugna...

EUVD-2018-2783

Malware in sbrugna...

EUVD-2018-9729

Malware in sbrugna...

EUVD-2018-2817

Malware in sbrugna...

EUVD-2021-27468

Malicious code in bioql PyPI...

EUVD-2025-4680

Malicious code in bioql PyPI...

EUVD-2025-4678

Malicious code in bioql PyPI...

EUVD-2025-4679

Malicious code in bioql PyPI...

EUVD-2022-37482

Malicious code in bioql PyPI...

EUVD-2025-4674

Malicious code in bioql PyPI...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2022-34528

D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue...

CVE-2022-34527

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte4C0160...

CVE-2018-10749

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'commit ' function and cause memory corruption. Furthermore, it is possible to redirect the flo...

CVE-2018-10750

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'staticGet' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'staticGet ' function and cause memory corruption. Furthermore, it is possible to redirect t...

CVE-2018-10713

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'read' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'read ' function and cause memory corruption. Furthermore, it is possible to redirect the flow of...