363 matches found
PT-2025-39076
Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126/240802/250416 Description A flaw exists in D-Link DIR-823X that allows for command injection. This occurs due to manipulation of the port argument within an unknown functionality of the file /usr/sbin/goahead. T...
PT-2025-37415
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823x versions up to 250416 Description: A command injection issue exists in D-Link DIR-823x firmware. The issue is located in an unknown function within the /goform/diag ping file. Manipulation of the target addr argument allows fo...
CVE-2025-9769
The CVE-2025-9769 vulnerability affects D-Link DI-7400G+ (firmware 19.12.25A1). It is triggered by the function sub_478D28 in /mng_platform.asp, where manipulating the addr argument with the input echo 12345 > poc.txt leads to a command injection. This can enable an attacker to run arbitrary c...
CVE-2025-29514
Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request...
CVE-2025-29514
Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request...
CVE-2025-29514
Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request...
CVE-2025-29515
The D-Link DSL-7740C router, specifically running firmware version DSL7740C.V6.TR069.20211230 , is susceptible to an incorrect access control vulnerability in the DELT_file.xgi endpoint. This security flaw allows a remote attacker to read, modify, delete data, and alter various device settings by...
D-Link DSL-7740C 安全漏洞
The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C backup function, which can be exploited by an attacker to execute arbitrary commands...
CVE-2025-29515
Incorrect access control in the DELTfile.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password...
CVE-2025-29523
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...
Exploit for CVE-2025-57105
CVE-2025-57105 Command Injection BUGAuthor Xingyu Wu...
DLINK-DIR600LAx-Vulnerability
DLINK-DIR600LAx-Vulnerability - 01: - 02: - 03: - 04: - 0...
D-Link DI-8100 Buffer Overflow Vulnerability (CNVD-2025-16668)
The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from the improper handling of the parameters removeextproto/removeextport by the sprintf function in the /upnpctrl.asp file of the...
CVE-2025-7565
A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function geteasycfg of the file /cgi-bin/lighttpd.cgi of the component Web Management Interface. The manipulation of the argument Password leads to information disclosure. It is possib...
VulnCheck KEV: CVE-2021-46229
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usbpaswd.asp. This vulnerability allows attackers to execute arbitrary commands via the name parameter...
D-Link DI-500WF-WT Command Injection Vulnerability
D-Link DI-500WF-WT is a device for wireless network coverage from China AUO D-Link. A command injection vulnerability exists in the D-Link DI-500WF-WT, which stems from the parameter cmd failing to properly filter constructed command special characters, commands, and so on. No detailed...
Exploit for Improper Neutralization in Dlink Dns-320_Firmware
CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit T...
D-Link DI-500WF-WT 注入漏洞
D-Link DI-500WF-WT is a device for wireless network coverage from China AUO D-Link. A command injection vulnerability exists in the D-Link DI-500WF-WT, which stems from the parameter cmd failing to properly filter constructed command special characters, commands, and so on. No detailed...
CVE-2025-5215
A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The manipulation of the argument Authorization leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit ha...