Lucene search
+L

66 matches found

Cvelist
Cvelist
added 2022/12/23 12:0 a.m.28 views

CVE-2022-46568

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...

8AI score0.01414EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:0 a.m.17 views

The vulnerability of the SetSysEmailSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the lack of measures taken to sanitize the input data entered by the user in the input field. Exploiting this vulnerability can allow a remote...

7.7CVSS7.1AI score0.01085EPSS
SaveExploits0References6Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/11/03 12:0 a.m.37 views

D-Link DIR-1935 SetSysEmailSettings Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

6.8CVSS3.3AI score0.01085EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/07/22 12:0 a.m.9 views

PT-2022-5536 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

7.7CVSS6.9AI score0.01085EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.9 views

The vulnerability of the SetSysEmailSettings() function in D-Link’s router software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in D-Link router software relates to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.06408EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2019/02/13 3:29 a.m.18 views

Command injection

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

9CVSS9.1AI score0.06408EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder