D-LINK DAP-1620 A1 v1.01 - Directory Traversal Vulnerability

Exploit Title: DLINK DAP-1620 A1 v1.01 - Directory Traversal Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://me.dlink.com/consumer Version: DAP-1620 - A1 v1.01 Tested on: Linux CVE : CVE-2021-46381 POST /apply.cgi HTTP/1.1 Content-Type: application/x-www-form-urlencoded Refere...

DLINK DAP-1620 A1 1.01 Directory Traversal

Exploit Title: DLINK DAP-1620 A1 v1.01 - Directory Traversal Date: 27/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://me.dlink.com/consumer Version: DAP-1620 - A1 v1.01 Tested on: Linux CVE : CVE-2021-46381 POST /apply.cgi HTTP/1.1 Content-Type:...

CVE-2021-46381

creationtimestamp| type| source ---|---|--- 2022-03-04 18:26:56+00:00| seen| https://t.me/cibsecurity/38424 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2026-03-31 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2021-46381

Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...

CVE-2021-46381

Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...

CVE-2021-46381

CVE-2021-46381 affects the D-Link DAP-1620 (A1) device, where a path traversal leads to Local File Inclusion. The vulnerability allows reading sensitive internal files such as /etc/passwd and /etc/shadow via crafted input to the device’s web interface (notably through apply.cgi). Public exploit/m...