CVE-2002-0346

CVE-2002-0346 Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi. Packetstorm publication at https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html...

dlink_shell_poc

dlinkshellpoc Dlink shell PoC Tested on D-Link 815 Version A 1.3 Works with: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Note: PoC Code doe not handle captas. Example root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link...

CVE-2002-0348

CVE-2002-0348 service.cgi en Cobalt RAQ 4 permite a atacantes remotos causar una denegación de servicio Publicación en Packetstorm en https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html Publicación en SecurityFocus en https://www.securityfocus.com/bid/4209 Autor Alex Hernandez ali...

EUVD-2002-0343

Malware in sbrugna...

EUVD-2018-21602

Malware in sbrugna...

D-Link Multiple DIR Devices RCE Vulnerability (Aug 2025)

Multiple D-Link DIR devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 allows attackers to execute malicious commands.

The vulnerability in the service.cgi script of D-Link router microprogramming devices such as DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 lies in the failure to eliminate special elements during the processing of the EVENT=CHECKFW parameter. Exploiting this vulnerability...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110 , DIR-412 , DIR-600 , DIR-610 , DIR-615 , DIR-645 , and DIR-815 running firmware version 1.03 , are vulnerable to remote code execution (RCE) . The flaw exists in the service.cgi endpoint due to improper input handling of the EVENT=CHECKFW par...

CVE-2018-25115 D-Link DIR-110/412/600/615/645/815 RCE via service.cgi

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2018-25115: Improper Neutralization of Special Elements used in an OS Command

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32046 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: Draytek Vigor 3910 version 4.3.2.6 Description: A buffer overflow issue was discovered in the sSrvName parameter at the "service.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations:...

CVE-2024-46565: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

VulnCheck KEV: CVE-2018-25115

Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...

D-Link DIR 615/645/815 service.cgi Remote Command Execution Vulnerability

D-Link DIR 615/645/815 is a wireless router product from AUO D-Link. A remote command execution vulnerability exists in D-Link DIR 615/645/815 routers with firmware version 1.03 and earlier. The vulnerability is caused by splicing data from HTTP POST requests in service.cgi, resulting in splicing...

CVE-2002-0348: Undefined Security Weakness

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument...

CVE-2002-0346: Undefined Security Weakness

Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to 1 service.cgi or 2 alert.cgi...