CVE-2024-3273

CVE-2024-3273 Proof of Concept PoC This repository contains a Proof of Concept PoC for CVE-2024-3273, a security vulnerability discovered in D-Link NAS devices. The vulnerability allows attackers to execute arbitrary commands on vulnerable devices. Description CVE-2024-3273 is a vulnerability in...

dinkleberry

Dinkleberry 🫐 Are you one of the 92,000+ people1 stuck with a D-Link NAS vulnerable to CVE-2024-3272, and no patch in sight? This tool uses the exploit itself to patch a vulnerable device. 1: See original disclosure in refs What it does Dinkleberry will execute a command to swap out the vulnerabl...

cve-2024-10914

POC - CVE-2024–10914 - Vulnerabilidad de Inyección de Comandos en el parámetro name para D-Link NAS Resumen Se encontró una vulnerabilidad en D-Link DNS-320, DNS-320LW, DNS-325 y DNS-340L hasta la versión 20241028. Se ha declarado como crítica. Esta vulnerabilidad afecta a la función cgiuseradd d...

CVE-2024-3273

D-Link NAS Command Execution Exploit This Python script exploits a vulnerability CVE-2024-3273 in D-Link NAS devices, allowing arbitrary command execution. It leverages the vulnerability to execute commands remotely on the affected devices. Features Executes arbitrary commands on D-Link NAS...

CVE-2024-3273-D-Link-Remote-Code-Execution-RCE

CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit Description This repository contains an exploit for CVE-2024-3273 , a critical vulnerability found in specific D-Link devices that allows for Remote Code Execution RCE. The vulnerability arises from improper input validation in the...

CVE-2026-82692

D-Link DNS-340L and DNS-345 (versions up to 20260717 ) are vulnerable to an OS command injection in the CGI script /cgi-bin/iscsi_mgr.cgi . By manipulating the arguments alias , username , password , or volume_location , an attacker can inject and execute arbitrary OS commands. The attack can be ...

EUVD-2026-68485

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usbdevice.cgi of the component CGI Handler. Such manipulation of the argument fupsip leads to os command injection. The attac...

EUVD-2026-68481

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

D-Link NAS - Command Injection via Group Parameter

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. i...

CVE-2024-10914

CVE-2024-10914 Test della vulnerabilità di iniezione di comandi per D-Link NASTest manuale con Burp Suite Dork per trovare dispositivi vulnerabili Utilizza il seguente dork di ricerca per trovare dispositivi D-Link NAS potenzialmente vulnerabili: root@kitploit: FOFA: app="DLink-DNS-ShareCenter" &...

Turvan6rkus-CVE-2024-3273

🛠️ Dispositivi D-Link Network Attached Storage - Iniezione di Comandi 🌟 Contesto I dispositivi D-Link Network Attached Storage NAS o storage di rete sono dispositivi con uno o più hard disk collegati a una rete informatica per l'archiviazione e la condivisione di file. A differenza di un normale...

CVE-2024-3273-EXPLOIT

CVE-2024-3273 – D-Link Remotecodeausführung RCE 💥 Eine kritische Sicherheitslücke, klassifiziert als CVE-2024-3273, wurde in mehreren D-Link-NAS-Geräten entdeckt, darunter DNS-320L, DNS-325, DNS-327L und DNS-340L, bis zum Datum 20240403. Diese Sicherheitslücke betrifft eine unbekannte Funktion de...

dlink

Injeção de Comando e Conta Backdoor em Dispositivos NAS da D-Link Resumo da Vulnerabilidade: A vulnerabilidade descrita afeta vários dispositivos NAS da D-Link, incluindo os modelos DNS-340L, DNS-320L, DNS-327L e DNS-325, entre outros. A vulnerabilidade está presente na URI nassharing.cgi , que é...

honeypot-dlink-CVE-2024-3273

Honeypot-dlink-CVE-2024-3273 Schneller und schmutziger Honeypot für CVE-2024-3273. Diese Vorlage kann verwendet werden, um in 10 Minuten einen einfachen Honeypot einzurichten. TL;DR: Finden Sie ein fofa, shodan, onyphe, .... Klonen Sie es mit dem wgetclonehttp.sh. Manuelle Anpassungen, um den...

CVE-2024-10914

POC - CVE-2024–10914- Vulnerabilità di iniezione di comandi nel parametro name per D-Link NAS Panoramica È stata trovata una vulnerabilità in D-Link DNS-320, DNS-320LW, DNS-325 e DNS-340L fino al 20241028. È stata classificata come critica. La funzione interessata da questa vulnerabilità è...

D-Link

CVE-2024-10914 D-Link Remotecodeausführung RCE D-Link NAS- Befehlsinjektion über den Namensparameter CVE-2024-10914:- Es wurde eine Schwachstelle in D-Link DNS-320, DNS- 320LW, DNS-325 und DNS-340L bis 20241028 gefunden. Sie wurde als kritisch eingestuft. Von dieser Schwachstelle betroffen ist di...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS कमांड इंजेक्शन एक्सप्लॉइट यह Python-आधारित एक्सप्लॉइट /cgi-bin/accountmgr.cgi?cmd=cgiuseradd एंडपॉइंट के माध्यम से कई D-Link NAS उत्पादों में कमांड इंजेक्शन भेद्यता को लक्षित करता है। यह भेद्यता बिना प्रमाणीकरण वाले हमलावरों को प्रभावित डिवाइस पर मनमाने सिस्टम कमांड...

CVE-2026-5312

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the...

CVE-2026-5212

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function...

CVE-2026-5312

A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the...