689 matches found
DIR8xx_PoC
phpcgi phpcgi 负责处理对 .php、.asp 和 .txt 页面的请求，同时还检查用户是否已获得授权。然而，如果请求以恰当的方式构造，攻击者可以轻松绕过授权并执行一个脚本，该脚本会返回路由器的登录名和密码。 hnap 由于 hnap 协议实现中的错误，我们可以使栈溢出，并以 root 权限执行任意 sh 命令。 update 如果你能访问以太网端口，就可以向设备上传自定义固件，因为系统恢复服务会在重启后的几秒钟内启动并可用。...
CVE-2026-8260
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...
Exploit for CVE-2026-8260
CVE-2026-8260 Overview A buffer overflow vulnerability af...
EUVD-2026-29016
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...
CVE-2026-8260
Technical details about CVE-2026-8260 are not publicly available in the provided documents. Monitor for updates from official advisories. The initial description states the vulnerability exists in D-Link DCS-935L HNAP service SetDeviceSettings buffer overflow.
CVE-2026-8260 D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings buffer overflow
A vulnerability was found in D-Link DCS-935L up to 1.10.01. The impacted element is the function SetDeviceSettings of the file /web/cgi-bin/hnap/hnapservice of the component HNAP Service. The manipulation of the argument AdminPassword results in buffer overflow. The attack can be executed remotel...
D-Link DCS-935L 缓冲区错误漏洞
The D-Link DCS-935L is a router produced by D-Link Corporation. Versions of the D-Link DCS-935L prior to 1.10.01 contain a buffer error vulnerability. This vulnerability stems from the operation of the AdminPassword parameter in the SetDeviceSettings function within the HNAP Service component,...
CVE-2025-63932
D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command...
PT-2025-47527
Name of the Vulnerable Software and Affected Versions D-Link Router DIR-868L version FW106KRb01 Description The D-Link Router DIR-868L version FW106KRb01 contains a remote code execution issue in the cgibin binary. The HNAP service within cgibin does not properly filter the HTTP SOAPAction header...
CVE-2025-11488 D-Link DIR-852 HNAP1 command injection
A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...
EUVD-2019-17713
Malware in sbrugna...
EUVD-2017-12319
Malware in sbrugna...
EUVD-2019-17710
Malware in sbrugna...
EUVD-2019-18501
Malware in sbrugna...
EUVD-2019-18505
Malware in sbrugna...
EUVD-2019-16932
Malware in sbrugna...
EUVD-2019-17717
Malware in sbrugna...
EUVD-2019-15824
Malware in sbrugna...