780 matches found
D-Link DIR-505 HNAP Request Remote Buffer Overflow Exploit
Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...
CVE-2014-3936
Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...
Stack overflow
Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...
CVE-2014-3936
Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...
CVE-2014-3936
CVE-2014-3936 affects D-Link DSP-W215 (Rev. A1) 1.01b06 and earlier, DIR-505 firmware prior to 1.08b10, and DIR-505L prior to 1.01. The flaw is a stack-based buffer overflow in the do_hnap function (www/my_cgi.cgi) triggered by a long Content-Length header in a GetDeviceSettings HNAP request, all...
PT-2014-5616 · D Link · D-Link Dir-505 +1
Name of the Vulnerable Software and Affected Versions: D-Link DSP-W215 versions 1.01b06 and earlier D-Link DIR-505 versions prior to 1.08b10 D-Link DIR-505L versions 1.01 and earlier Description: The issue allows remote attackers to execute arbitrary code via a long Content-Length header in a...
CVE-2014-3936: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the dohnap function in www/mycgi.cgi in D-Link DSP-W215 Rev. A1 with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in...
D-LinkDSP-W215 smart plug remote command execution-vulnerability warning-the black bar safety net
0x00 background D-Link DSP-W215 smart plug is a wireless control power switch outlet. It is not from Amazon and Best Buy to buy, but the firmware from D-Link website to download the true ass to. The DSP-W215 exists a stack overflow vulnerability through the vulnerability can control the entire...
D-Link HNAP Request Remote Buffer Overflow
This module exploits an anonymous remote code execution vulnerability on different D-Link devices. The vulnerability is due to a stack based buffer overflow while handling malicious HTTP POST requests addressed to the HNAP handler. This module has been successfully tested on D-Link DIR-505 in an...
DNS SOHO Router Pharming Attack Takes 300,000 Routers
More than 300,000 small office and home office routers, most in Europe and Asia, were compromised in a campaign that started in mid-December, continuing a rash of security incidents involving home and small business networking equipment. Researchers at Team Cymru published a report today on the...
HNAP Configuration File Detection
Binary data 7093.pasl...
Home Network Administration Protocol (HNAP) Detection
The script sends a connection request to the server and attempts to determine if the Home Network Administration Protocol HNAP is supported. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Multiple Linksys Devices Multiple RCE Vulnerabilities
Multiple Linksys devices are prone to multiple remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Linksys Malware 'The Moon' Spreading from Router to Router
Which Wireless Router do you have at your Home or Office? If it’s a Linksys Router you could be in the danger to a new malware that attacks your firmware and replicates itself. Security researcher Johannes B. Ullrich from the SANS Technology Institute has warned about a self-replicating malware...
Moon Worm Spreading on Linksys Home and SMB Routers
A self-replicating worm is spreading among a number of different Linksys home and small business routers. Researchers at the SANS Institute reported the outbreak yesterday and have not been able to determine whether there is a malicious payload or if the worm connects to a command and control...
HNAP Protocol Detection
Binary data 8128.prm...
OS Identification : HNAP
The remote operating system can be identified through information collected via HNAP Home Network Administration Protocol. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53471; scriptversion"1.12"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"OS Identification...
D-Link Patches Wireless Routers
According to a statement by D-Link, firmware updates for its DIR-635 HW-Revision B, DIR-655 HW-Revision A1-A4 and DIR-855 HW-Revision A2 router models are now available to download at to close the recently discovered hole in the Home Network Administration Protocol HNAP of these devices. Read the...
D-Link Routers - Authentication Bypass (2)
D-Link Routers - Authentication Bypass 2 Multiple D-Link routers suffer from insecure implementations of the Home Network Administration Protocol which allow unauthenticated and/or unprivileged users to view and configure administrative settings on the router. Further, the mere existence of HN...
D-Link Routers - Authentication Bypass (2)
Multiple D-Link routers suffer from insecure implementations of the Home Network Administration Protocol which allow unauthenticated and/or unprivileged users to view and configure administrative settings on the router. Further, the mere existence of HNAP allows attackers to completely bypass...