CVE-2023-27216

CVE-2023-27216 - DLink ルーター このドキュメントは、ファームウェアのリバースエンジニアリングとエクスプロイトの初心者である私の個人的な経験を記録したものです。 スコープ デモンストレーションとして、CVE-2023-27216 を解析・再現します。 CVE番号: CVE-2023-27216 脆弱性の説明: D-Link DSL-3782 v.1.03 で発見された問題。リモートの認証済みユーザーがネットワーク設定ページを介してルート権限で任意のコードを実行できる。 機器モデル: D-Link DSL-3782 ファームウェアバージョン:...

CVE-2018-8941

CVE-2018-8941: D-Link DSL-3782 コード実行（概念実証） Adam Simuntis :: https://twitter.com/adamsimuntis Mindaugas Slusnys :: https://twitter.com/mislusnys バッファオーバーフローの脆弱性は、Web GUI の 'Diagnostics' 機能のラッパーとして使用される '/userfs/bin/tcapi' バイナリで発見されました。 認証されたユーザーは、'set DiagnosticsEntry' 関数を使用して '/user/bin/tcapi'...

The vulnerability of the system file `/cgi-bin/New_GUI/Set/Diagnostics.asp` of the Diagnostics component of the D-Link DSL-3782 microprogramming device allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the /cgi-bin/NewGUI/Set/Diagnostics.asp function of the Diagnostics component of D-Link DSL-3782 router microprogramming software is related to the lack of data cleaning measures at the management level when processing the Addr parameter. Exploiting this vulnerability allows ...

CVE-2026-90880

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

CVE-2026-90880 D-Link DSL-3782 Diagnostics Diagnostics.asp system command injection

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

CVE-2026-90880

A command injection vulnerability affects the D-Link DSL-3782 (firmware 2016-07-28 ). The flaw resides in the system function of the file /cgi-bin/New_GUI/Set/Diagnostics.asp within the Diagnostics component. Manipulating the Addr argument allows an attacker to inject and execute arbitrary comman...

EUVD-2026-78270

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/NewGUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotely...

PT-2026-91242

A security flaw has been discovered in D-Link DSL-3782 2016-07-28. This issue affects the function system of the file /cgi-bin/New GUI/Set/Diagnostics.asp of the component Diagnostics. Performing a manipulation of the argument Addr results in command injection. The attack may be initiated remotel...

CVE-2023-27216_D-Link_DSL-3782_Router_command_injection

このリポジトリには README がありません。...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

このリポジトリには README がありません。...

EUVD-2018-2819

Malware in sbrugna...

EUVD-2018-2783

Malware in sbrugna...

EUVD-2018-9729

Malware in sbrugna...

EUVD-2018-2817

Malware in sbrugna...

EUVD-2025-4678

Malicious code in bioql PyPI...

EUVD-2025-4679

Malicious code in bioql PyPI...

EUVD-2025-4674

Malicious code in bioql PyPI...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2022-34527

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte4C0160...

CVE-2018-10749

An issue was discovered on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'commit' parameter to the '/userfs/bin/tcapi' binary in the Diagnostics component using the 'commit ' function and cause memory corruption. Furthermore, it is possible to redirect the flo...