CVE-2018-6212

Affected product: D-Link DIR-620 router family with ISP-custom firmware variants (versions 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, 2.0.22). Issue: a reflected Cross-Site Scripting (XSS) vulnerability in the web interface’s Quick Search field due to missed filtration of special characters and i...

Backdoors in D-Link’s backyard

"If you want to change the world, start with yourself." In the case of security research this can be rephrased to: "If you want to make the world safer, start with the smart things in your home." Or, to be more specific, start with your router – the core of any home network as well as an...