CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2024-57677

An access control issue in the component form2Wan.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the wan service of the device via a crafted POST request...

CVE-2024-57684

An access control issue in the component formDMZ.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request...

CVE-2024-57680

An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request...

CVE-2024-57680

An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request...

CVE-2024-57681

The D-Link DIR-816A2 router (specifically firmware FWv1.10CNB05 R1B011D88210 ) is vulnerable to an access control issue in the form2alg.cgi component. An unauthenticated attacker can exploit this deficiency by sending a crafted HTTP POST request to the form2alg.cgi endpoint to set the agl service...

CVE-2024-57677

The D-Link 816A2 router (specifically firmware version 816A2_FWv1.10CNB05_R1B011D88210 ) is vulnerable to an access control error in the form2Wan.cgi component. An unauthenticated remote attacker can exploit this by sending a specially crafted HTTP POST request to the form2Wan.cgi endpoint to con...

CVE-2024-57683

The D-Link DIR-816A2 router, specifically firmware version FWv1.10CNB05_R1B011D88210 , is affected by an access control vulnerability in the websURLFilterAddDel component. An unauthenticated attacker can send a specially crafted HTTP POST request to the device to modify filter settings. Exploitat...

CVE-2024-57684

An access control issue in the component formDMZ.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request...

The vulnerability of the plugins_call_handle_uri_clean() function in the /sbin/lighttpd microprogramming system of D-Link DAP-1520 wireless signal amplifiers allows a hacker to induce a service failure.

The vulnerability of the pluginscallhandleuriclean function in the /sbin/lighttpd microprogramming system for D-Link DAP-1520 wireless signal amplifiers is related to errors in pointer assignment due to incorrect checking of HTTP request formats. Exploiting this vulnerability could allow an...

CVE-2024-36832

A NULL pointer dereference in D-Link DAP-1513 REVAFIRMWARE1.01 allows attackers to cause a Denial of Service DoS via a crafted web request without authentication. The vulnerability occurs in the /bin/webs binary of the firmware. When /bin/webs receives a carefully constructed HTTP request, it wil...

CVE-2024-11047

A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgradefilterasp of the file /upgradefilter.asp. The manipulation of the argument path leads to stack-based buffer overflow. The attack can be launched remotely...

D-Link DNS-320 访问控制错误漏洞

The D-Link DNS-320 is a NAS Network Attached Storage device from China-based Terasic D-Link. An access control error vulnerability exists in the D-Link DNS-320. An attacker could exploit the vulnerability to obtain sensitive information...

PT-2024-16342 · Tp Link · Tp-Link Iot Smart Hub

Name of the Vulnerable Software and Affected Versions: TP-Link IoT Smart Hub affected versions not specified Description: The issue exists due to the storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmwa...

CVE-2024-9558

A vulnerability was found in D-Link DIR-605L 2.13B01 BETA and classified as critical. This issue affects the function formSetWanPPTP of the file /goform/formSetWanPPTP. The manipulation of the argument webpage leads to buffer overflow. The attack may be initiated remotely. The exploit has been...

The vulnerability of the msp_info.htm file on the D-Link DI-8100G network device allows a hacker to bypass security restrictions and execute arbitrary commands.

The vulnerability of the mspinfo.htm file on the D-Link DI-8100G network device is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitra...

D-Link DAR-7000 操作系统命令注入漏洞

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. An OS command injection vulnerability exists in the D-Link DAR-7000 20240912 and earlier versions, which stems from the parameter host in the file /view/DBManage/BackupServercommit.php that can lead to OS command...

CVE-2024-44375

D-Link DI-8100 v16.07.26A1 has a stack overflow vulnerability in the dbsrvasp function...

CVE-2024-44401

D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via sub47A60C function in the upgradefilter.asp file...

PT-2024-6373 · D Link · D-Link Di-8400

Name of the Vulnerable Software and Affected Versions: D-Link DI-8400 version 16.07.26A1 Description: A critical issue has been discovered, affecting the upgrade filter asp function in the upgrade filter.asp file. This issue allows for command injection through manipulation of the path parameter...