Lucene search
+L

243 matches found

Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.35 views

D-Link G416 awsfile chmod Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.27 views

D-Link G416 nodered chmod Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00946EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.25 views

D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

4.3CVSS6.6AI score0.00514EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.188 views

D-Link G416 httpd API-AUTH Digest Processing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00637EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.28 views

D-Link G416 flupl pythonmodules Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/12/20 12:00 a.m.22 views

D-Link G416 cfgsave upusb Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from the lack...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.10 views

PT-2023-8212 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the cfgsave function of the HTTP service in D-Link G416 wireless routers. This can be exploited by a remote attacker to execute...

8.8CVSS8AI score0.00637EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.8 views

PT-2023-8218 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. The specific flaw exists within the HTTP service listening on TC...

8.8CVSS7.3AI score0.00916EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.10 views

PT-2023-8228 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. The specific flaw exists within the HTTP service listening on TC...

8.8CVSS7.3AI score0.00946EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.11 views

PT-2023-8213 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to a stack-based buffer overflow in the httpd API-AUTH Digest function of the D-Link G416 router's HTTP microprogram. This can be exploited by a remote attacker to...

8.8CVSS8.2AI score0.00637EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/07/28 12:00 a.m.17 views

PT-2023-8268 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. The specific flaw exists within the HTTP service listening on TC...

8.8CVSS7.3AI score0.00916EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/27 12:00 a.m.15 views

PT-2023-8032 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue exists due to the lack of proper validation of a user-supplied string before using it to execute a system call in the HTTP service listening on TCP port 80. This allows...

8.8CVSS7.8AI score0.00916EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/26 12:00 a.m.15 views

PT-2023-7955 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to a command injection vulnerability in the nodered chmod function of the D-Link G416 router's firmware. This vulnerability can be exploited by a remote attacker to...

8.8CVSS8.3AI score0.00946EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/20 12:00 a.m.12 views

PT-2023-7956 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to a command injection vulnerability in the flupl pythonmodules of D-Link G416 wireless routers. This vulnerability allows network-adjacent attackers to execute...

8.8CVSS7.7AI score0.00916EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/20 12:00 a.m.11 views

PT-2023-7954 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. The specific flaw exists within the HTTP service...

8.8CVSS7.3AI score0.00946EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/14 12:00 a.m.14 views

PT-2023-7949 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to a lack of authentication for a critical function in the httpd daemon of the D-Link G416 router's firmware. This allows a remote attacker to bypass security...

8.8CVSS7.4AI score0.00696EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/07/14 12:00 a.m.15 views

PT-2023-7951 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 routers. The specific flaw exists within the HTTP service listening on TC...

8.8CVSS7.4AI score0.00916EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/12 12:00 a.m.26 views

PT-2023-8009 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to the cfgsave backusb function of the D-Link G416 router's firmware, which does not properly neutralize special elements used in an operating system command. This...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/12 12:00 a.m.14 views

PT-2023-7953 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: The issue is related to the cfgsave upusb function in the D-Link G416 router's firmware, which does not properly neutralize special elements used in an operating system command. This ca...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/07 12:00 a.m.10 views

PT-2023-8215 · D Link · D-Link G416

Name of the Vulnerable Software and Affected Versions: D-Link G416 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link G416 routers. The specific flaw exists within the HTTP service listeni...

6.5CVSS6.7AI score0.00514EPSS
SaveExploits0References6
Rows per page
Query Builder