CVE-2024-10914

cve-2024-10914 cve-2024-10914 のエクスプロイト: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 コマンドインジェクション...

CVE-2024-10914

CVE-2024-10914 D-Link DNS-320、DNS-320LW、DNS-325、DNS-340L（20241028 までのバージョン）に脆弱性が見つかりました。これは critical と評価されています。この脆弱性の影響を受けるのは、ファイル /cgi-bin/accountmgr.cgi?cmd=cgiuseradd 内の関数 cgiuseradd です。引数 name を操作すると、OS...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- これはD-Link RCE脆弱性検出プログラムです 脆弱性概要 D-Link DNS-320などは、中国のD-Link社製NAS（ネットワーク接続ストレージ）デバイスです。 D-Linkの複数製品にセキュリティ脆弱性が存在します。この脆弱性は、パラメータnameに対する誤った操作がOSコマンドインジェクションを引き起こすことに起因します。以下の製品およびバージョンが影響を受けます：D-Link DNS-320、DNS-320LW、DNS-325、DNS-340L 20241028以前のバージョン ネットワークスキャン...

CVE-2024-10914

CVE-2024-10914 - D-Link リモートコード実行（RCE）エクスプロイト このスクリプトは、特定の D-Link デバイスにおけるリモートコード実行の脆弱性である CVE-2024-10914 の概念実証（PoC）エクスプロイトです。このスクリプトは、脆弱なデバイスを特定して悪用し、任意のコマンドを実行します。 注記: このスクリプトは教育目的または許可された環境でのみ使用してください。この脆弱性を不正に悪用することは違法であり、倫理に反する可能性があります。 root@kitploit: ターゲットの検索 潜在的なターゲットを見つけるには、Fofa（Shodan.io...

D-Link DNS-320 - Remote Code Execution

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection. id: CVE-2019-16057 info: name: D-Link DNS-320 - Remote Code Execution author: DhiyaneshDk severity: critical description: | The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerabl...

CVE-2024-10914-EXPLOIT

CVE-2024-10914 - D-Link Remote-Code-Ausführung RCE Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für eine kritische Schwachstelle, die D-Link-NAS-Geräte betrifft. Der Fehler, der als CVE-2024-10914 verfolgt wird, betrifft die folgenden Modelle: D-Link DNS-320 D-Link DNS-320LW D-Lin...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Report di test di penetrazione autorizzato D-Link DNS-320L NAS | Cliente: Otonata Overview Questo repository contiene il report completo di valutazione della sicurezza per un test di penetrazione autorizzato condotto su un dispositivo...

CVE-2024-10914-Exploit

CVE-2024-10914-Exploit CVE-2024-10914 è una vulnerabilità critica che interessa i modelli D-Link DNS-320, DNS-320LW, DNS-325 e DNS-340L fino alla versione 20241028. La funzione cgiuseradd nel file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd è la responsabile, consentendo agli attaccanti di iniettare...

CVE-2024-10914

CVE-2024-10914 - Exploit de Execução Remota de Código RCE em D-Link Este script é um exploit de prova de conceito PoC para CVE-2024-10914, uma vulnerabilidade de execução remota de código em certos dispositivos D-Link. O script identifica e explora dispositivos vulneráveis para executar comandos...

CVE-2026-16447

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

EUVD-2026-46258

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

CVE-2026-16447

CVE-2026-16447 concerns a vulnerability in the D-Link DNS-320 1.0.2 where the argument Filedata[] in /web/jquery/uploader/multi_uploadify.php can be manipulated to achieve unrestricted upload. Remote exploitation is possible according to the provided records. The affected component is a server-si...

CVE-2026-16332

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

CVE-2026-16332

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

CVE-2026-16332 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

CVE-2026-16330

A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...

CVE-2026-16331

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

CVE-2026-16331 D-Link DNS-320 save_ajax.php unrestricted upload

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

EUVD-2026-46138

A security vulnerability has been detected in D-Link DNS-320 1.0.2. This affects an unknown function of the file /web/function/saveajax.php. Such manipulation of the argument Malicious Handler leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed public...

CVE-2026-16331

The CVE-2026-16331 entry concerns D-Link DNS-320 firmware 1.0.2. The vulnerability affects the file /web/function/save_ajax.php, where manipulation of an argument in the Malicious Handler can lead to unrestricted file upload. Exploitation is possible remotely, and public disclosure of the exploit...