Lucene search
+L

243 matches found

BDU FSTEC
BDU FSTEC
added 2023/12/25 12:00 a.m.13 views

The vulnerability of the httpd-demon software of D-Link G416 router microprogramming system allows a hacker to bypass security restrictions.

The vulnerability of the httpd-daemon of D-Link G416 microprogrammed router software is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...

8.8CVSS7.6AI score0.00696EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:00 a.m.10 views

The vulnerability of the cfgsave upusb function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the cfgsave upusb function in D-Link G416 microprogrammed routers lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by connecting to port 80...

8.8CVSS8.1AI score0.00916EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:00 a.m.11 views

The vulnerability of the flupl function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the flupl function in D-Link G416 router microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

8.8CVSS8.1AI score0.00946EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:00 a.m.10 views

The vulnerability of the nodered chmod function in D-Link G416 router software allows a hacker to execute arbitrary code.

The vulnerability of the nodered chmod function in D-Link G416 router microprogramming systems is related to the failure to take measures to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

8.8CVSS8.1AI score0.00946EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:00 a.m.12 views

The vulnerability of the cfgsave function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the cfgsave function in D-Link G416 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by connecting to...

8.8CVSS8.1AI score0.01187EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/25 12:00 a.m.14 views

The vulnerability of the awsfile chmod function in D-Link G416 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the awsfile chmod function in D-Link G416 router microprogramming devices is related to the failure to eliminate special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by connecting to port 80...

8.8CVSS8.1AI score0.00916EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

D-Link G416 flupl query_type edit Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.29 views

D-Link G416 nodered gz File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.30 views

D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

D-Link G416 httpd Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack ...

8.8CVSS7.4AI score0.00696EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.24 views

D-Link G416 flupl filename Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.23 views

D-Link G416 cfgsave backusb Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.21 views

D-Link G416 flupl pythonapp Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

D-Link G416 awsfile rm Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.24 views

D-Link G416 httpd API-AUTH Timestamp Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.34 views

D-Link G416 ovpncfg Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.23 views

D-Link G416 awsfile tar File Handling Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.31 views

D-Link G416 cfgsave Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.25 views

D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.24 views

D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

4.3CVSS6.6AI score0.00514EPSS
SaveExploits0References1
Rows per page
Query Builder