The vulnerability of the formLogDnsquery function (/goform/formLogDnsquery) in D-Link DIR-605L router software allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the formLogDnsquery function /goform/formLogDnsquery in D-Link DIR-605L router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

The vulnerability of the formEasySetupWizard() and formEasySetupWizard2() functions (/goform/formEasySetupWizard) of the D-Link DIR-605L router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formEasySetupWizard and formEasySetupWizard2 functions /goform/formEasySetupWizard of the D-Link DIR-605L router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an...

CVE-2024-48074

DrayTek Vigor2960 (v1.4.4) exposes an authorized RCE via the table parameter in the doPPPoE function (cgi-bin/mainfunction.cgi); an attacker can inject a command that is executed by the system function. Impact is high per CVSS metrics. Remediation/workaround from PT-2024-7515: temporarily disable...

The vulnerability of the formDeviceReboot function in D-Link DIR-619L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formDeviceReboot function in D-Link DIR-619L router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the nextpage parameter...

The vulnerability of the formWlanWizardSetup function (/goform/formWlanWizardSetup) in D-Link DIR-605L router software allows a hacker to execute arbitrary code.

The vulnerability of the formWlanWizardSetup function /goform/formWlanWizardSetup in the D-Link DIR-605L router software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the wlanTimerRuleJsonToBin() function in TP-Link TL-WDR7660 router software allows a hacker to trigger a service failure.

The vulnerability of the wlanTimerRuleJsonToBin function in TP-Link TL-WDR7660 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially crafted HTTP...

The vulnerability of the SetVLANSettings() function in D-Link DIR-878 and DIR-882 router microprogramming software allows a hacker to execute arbitrary operating system commands.

The vulnerability of the SetVLANSettings function in D-Link DIR-878 and DIR-882 router microprogramming systems exists because measures are not taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitra...

Digital China Networks DCME-320-L 命令注入漏洞

The Digital China Networks DCME-320-L DCN DCME-320-L is a wireless router from Digital China Networks China. A security vulnerability exists in Digital China Networks DCME-320-L version 9.3.2.114 and earlier, which originates from a remote attacker who can execute arbitrary code with the help of...

WAVLINK WN530H4、WN530HG4和WN572HG3 命令注入漏洞

WAVLINK WN530HG4 and others are products of RuiYin Technology WAVLINK, China.WAVLINK WN530HG4 is a wireless router.WAVLINK WL-WN530H4 is a router.WAVLINK WN572HG3 is a wireless router. A command injection vulnerability exists in WAVLINK WN530H4, WN530HG4, and WN572HG3, which stems from the fact...

The vulnerability of the formSetRoute function (/goform/formSetRoute) in the D-Link DIR-619L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetRoute /goform/formSetRoute function in D-Link DIR-619L router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a special...

D-Link DIR-619L formVirtualServ Function Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the parameter curTime of the formVirtualServ function in the file /goform/formVirtualServ that fails to correctly validate the length size of the...

The vulnerability of the Media Router component in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Media Router component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

D-Link DIR-619L 安全漏洞

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the parameter curTime of the formSetRoute function of the file /goform/formSetRoute that fails to correctly validate the length size of the input...

Tenda AC1206 Command Injection Vulnerability (CNVD-2024-41056)

The Tenda AC1206 is a wireless Gigabit router from Tenda China. The Tenda AC1206 suffers from a command injection vulnerability that stems from manipulation of the ateiwprivset/ateifconfigset functions in the file /goform/ate, which can lead to command injection. No detailed vulnerability details...

CVE-2024-45880

A command injection vulnerability exists in Motorola CX2L router v1.0.2 and below. The vulnerability is present in the SetStationSettings function. The system directly invokes the system function to execute commands for setting parameters such as MAC address without proper input filtering. This...

D-Link DIR-619 安全漏洞

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the curTime parameter of the...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high-performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version 4.3.2.6 and prior versions, which stems from a stack-based buffer overflow issue that contains a...

The vulnerability of the `fromAdvSetMacMtuWan` function in the `/goform/AdvSetMacMtuWan` file of the Tenda AX1803 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromAdvSetMacMtuWan function in the /goform/AdvSetMacMtuWan file of the Tenda AX1803 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

CVE-2024-20520

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability, an attacker would need to have valid...

The vulnerability of the setDiagnosisCfg() function in the microprogramming software of TOTOLINK AC1200 T8 routers allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setDiagnosisCfg function in the microprogramming software of TOTOLINK AC1200 T8 routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...