319 matches found
CVE-2025-29514
Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request...
CVE-2025-29514
Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request...
CVE-2025-29514
Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request...
CVE-2025-29515
CVE-2025-29515 affects D-Link DSL-7740C: the DELT_file.xgi endpoint has improper access control, enabling an attacker to modify arbitrary settings in the device’s XML database, including the administrator password. Affected component is the DELT_file.xgi API, within firmware DSL7740C.V6.TR069.202...
CVE-2025-29515
Incorrect access control in the DELTfile.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password...
D-Link DSL-7740C 安全漏洞
The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C backup function, which can be exploited by an attacker to execute arbitrary commands...
CVE-2025-29523
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...
Exploit for CVE-2025-57105
CVE-2025-57105 Command Injection BUGAuthor Xingyu Wu...
DLINK-DIR600LAx-Vulnerability
DLINK-DIR600LAx-Vulnerability - 01: - 02: - 03: - 04: - 0...
D-Link DI-8100 Buffer Overflow Vulnerability (CNVD-2025-16668)
The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from the improper handling of the parameters removeextproto/removeextport by the sprintf function in the /upnpctrl.asp file of the...
VulnCheck KEV: CVE-2021-46229
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usbpaswd.asp. This vulnerability allows attackers to execute arbitrary commands via the name parameter...
D-Link DI-500WF-WT Command Injection Vulnerability
D-Link DI-500WF-WT is a device for wireless network coverage from China AUO D-Link. A command injection vulnerability exists in the D-Link DI-500WF-WT, which stems from the parameter cmd failing to properly filter constructed command special characters, commands, and so on. No detailed...
Exploit for Improper Neutralization in Dlink Dns-320_Firmware
CVE-2024-10914 - D-Link Remote Code Execution RCE Exploit T...
D-Link DI-500WF-WT 注入漏洞
D-Link DI-500WF-WT is a device for wireless network coverage from China AUO D-Link. A command injection vulnerability exists in the D-Link DI-500WF-WT, which stems from the parameter cmd failing to properly filter constructed command special characters, commands, and so on. No detailed...
CVE-2025-5215
A vulnerability classified as critical has been found in D-Link DCS-5020L 1.01B2. This affects the function websReadEvent of the file /rame/ptdc.cgi. The manipulation of the argument Authorization leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit ha...
CVE-2024-48168
A stack overflow vulnerability exists in the sub402280 function of the HNAP service of D-Link DCS-960L 1.09, allowing an attacker to execute arbitrary code...
CVE-2024-44402
D-Link DI-8100G 17.12.20A1 is vulnerable to Command Injection via mspinfo.htm...
CVE-2024-48150
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub451208 function...