1600 matches found
CVE-2024-57684: Incorrect Default Permissions
An access control issue in the component formDMZ.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request...
CVE-2024-57680
An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request...
CVE-2024-57679
An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G repeater service of the device via a crafted POST request...
CVE-2024-57676
An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G wlan service of the device via a crafted POST request...
CVE-2024-57678
An access control issue in the component form2WlAc.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G mac access control list of the device via a crafted POST request...
CVE-2024-57684
An access control issue in the component formDMZ.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request...
CVE-2024-57681
An access control issue in the component form2alg.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted POST request...
CVE-2024-57681
The D-Link DIR-816A2 router, specifically the 816A2_FWv1.10CNB05_R1B011D88210 firmware, contains an access control issue within the form2alg.cgi component. This vulnerability allows unauthenticated attackers to set the agl service of the device by sending a specially crafted HTTP POST request . A...
CVE-2024-57684
An access control issue in the component formDMZ.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request...
CVE-2024-57676
An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G wlan service of the device via a crafted POST request...
CVE-2024-57680
An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request...
CVE-2024-57683: Incorrect Authorization
An access control issue in the component websURLFilterAddDel of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the filter settings of the device via a crafted POST request...
CVE-2024-57679: Incorrect Authorization
An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G repeater service of the device via a crafted POST request...
CVE-2024-57676
The D-Link DIR-816A2 router (specifically firmware 816A2_FWv1.10CNB05_R1B011D88210 ) is vulnerable to an access control issue in the form2WlanBasicSetup.cgi component. An unauthenticated attacker can exploit this deficiency by sending a crafted POST request to set up the 2.4G and 5G wlan services...
CVE-2024-57684
The D-Link DIR-816A2 router (specifically firmware 816A2_FWv1.10CNB05_R1B011D88210 ) is vulnerable to an access control issue in the formDMZ.cgi component. This flaw arises from incorrect use of standard permissions , allowing unauthenticated attackers to set the device's DMZ service via a crafte...
CVE-2024-57676: Incorrect Authorization
An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2FWv1.10CNB05R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G wlan service of the device via a crafted POST request...
CVE-2024-57679
The D-Link DIR-816A2 router, specifically running firmware 816A2_FWv1.10CNB05_R1B011D88210 , contains an access control deficiency in the form2RepeaterSetup.cgi component. This vulnerability allows unauthenticated attackers to set the 2.4G and 5G repeater services via a crafted HTTP POST request ...
CVE-2025-22729 WordPress VOD Infomaniak plugin <= 1.5.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VOD Infomaniak: from n/a through = 1.5.9...
