CVE-2026-16331

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

CVE-2026-16329

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

EUVD-2026-46138

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

CVE-2026-16331

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

EUVD-2026-46136

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-16329 D-Link DNS-320 uploadify.php unrestricted upload

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-16329

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-16329 D-Link DNS-320 uploadify.php unrestricted upload

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

CVE-2026-16329

The CVE-2026-16329 entry affects D-Link DNS-320 firmware 1.0.2. A vulnerable function in /photo_center/php/uploadify.php can be triggered by manipulating the Malicious Handler argument to allow unrestricted file upload. Exploitation is described as remote, with a publicly available exploit. No pa...

CVE-2026-16329: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

The vulnerability of the upload component in the /photo_center/php/uploadify.php file of the D-Link DNS-320 network storage software allows a hacker to cause a service failure.

The vulnerability of the /photocenter/php/uploadify.php component in the D-Link DNS-320 network storage software is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the “Save Changes and Settings” component in the /web/function/save_ajax.php microprogramming system of the D-Link DNS-320 network storage device allows a intruder to cause a service failure.

The vulnerability of the “Save Changes and Settings” component in the /web/function/saveajax.php microprogramming system for D-Link DNS-320 network storage devices is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability can allow an...

PT-2026-61754

Name of the Vulnerable Software and Affected Versions D-Link DNS-320 version 1.0.2 Description An unrestricted file upload issue exists in the /photo center/php/uploadify.php endpoint. A remote attacker can exploit this by manipulating the Malicious Handler argument to upload arbitrary files to t...

mozilla: Firefox did not ask before openings news: links in an external application

The Mozilla Foundation's Security Advisory: Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did not ask before doing so for the Usenet-related schemes news: and snews:. Since most operating...