Lucene search
+L

33 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/27 12:00 a.m.•6 views

CVE-2022-48108: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR878FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to escalate privileges to root via a crafted payload...

9.8CVSS5.8AI score0.03113EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/01/27 12:00 a.m.•2 views

PT-2023-15573

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.30B08 Description A command injection issue was found in the /SetNetworkSettings/SubnetMask component, allowing attackers to escalate privileges to root by sending a crafted payload. Recommendations For version 1.30B08...

9.8CVSS0.03113EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/09/26 12:00 a.m.•15 views

PT-2022-6976 · D Link · D-Link Dap-1325

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1325 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this issue. Th...

8.8CVSS7.4AI score0.01425EPSS
SaveExploits0References8
OSV
OSV
•added 2022/05/10 2:15 p.m.•16 views

CVE-2022-28896

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1FW130B06 allows attackers to escalate privileges to root via a crafted payload...

9.8CVSS7.3AI score0.03521EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/10 2:15 p.m.•7 views

CVE-2022-28896

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1FW130B06 allows attackers to escalate privileges to root via a crafted payload...

10CVSS7.2AI score0.03521EPSS
SaveExploits1References3
Prion
Prion
•added 2022/05/10 2:15 p.m.•27 views

Command injection

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1FW130B06 allows attackers to escalate privileges to root via a crafted payload...

10CVSS9.5AI score0.03521EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/10 12:00 a.m.•6 views

CVE-2022-28896: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1FW130B06 allows attackers to escalate privileges to root via a crafted payload...

10CVSS8AI score0.03521EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/07/02 12:00 a.m.•54 views

EulerOS Virtualization for ARM 64 3.0.2.0 : dhcp (EulerOS-SA-2021-2077)

According to the versions of the dhcp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - DHCP Dynamic Host Configuration Protocol is a protocol which allows individual devices on an IP network to get their own...

7.5CVSS7.7AI score0.06118EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2020/03/11 11:31 p.m.•43 views

CVE-2019-5181

An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can cause a stack buffer overflow, resulting in co...

7.8AI score0.00818EPSS
SaveExploits1References1
NVD
NVD
•added 2020/03/11 11:15 p.m.•38 views

CVE-2019-5174

An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.0214. A specially crafted XML cache file written to a specific location on the device can be used to inject OS commands. An attacker can send a specially crafted...

7.8CVSS7.7AI score0.01358EPSS
SaveExploits1References1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•33 views

TCPDB 3.8 - Remote Content Change Bypass Vulnerabilities

No description provided by source. Securitylab.ir Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/ Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Contents Change...

7.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2012/08/31 9:55 p.m.•13 views

CVE-2011-5149

Multiple cross-site scripting XSS vulnerabilities in SpamTitan 5.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 testaddr or 2 testpass parameter to auth-settings.php; 3 hostname, 4 domainname, or 5 mailserver parameter to setup-relay.php; or 6 subnetmask or...

4.3CVSS5.4AI score0.0208EPSS
SaveExploits2References8
seebug.org
seebug.org
•added 2009/08/26 12:00 a.m.•24 views

TCPDB 3.8 Remote Content Change Bypass Vulnerabilities

No description provided by source. Securitylab.ir Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/ Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Contents Change...

7.1AI score
SaveExploits0
Rows per page
Query Builder