D-Link - Unauthenticated Remote Code Execution

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...

PT-2026-83564

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A stack-based buffer overflow occurs in the Disk Formatting Handler Endpoint when processing the /boafrm/formDiskFormat endpoint. The issue is triggered by the manipulation of the partition argument...

PT-2026-83634

Name of the Vulnerable Software and Affected Versions D-Link DSM-G600 version 1.01 Description A weakness in the Multipart Handler component allows a remote attacker to perform an out-of-bounds write. This occurs through the manipulation of the /load file.cgi endpoint. An out-of-bounds write is a...

PT-2026-83565

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A stack-based buffer overflow occurs in the LTE Module Firmware Upgrade component. The issue resides in the sub 41802C function within the /boafrm/formLtefotaUpgradeFibocom file. A remote attacker can...

PT-2026-83566

Name of the Vulnerable Software and Affected Versions D-Link DIR-825M version 1.1.8 Description A command injection issue exists in the System Command Execution component. A remote attacker can manipulate the sysCmd argument within the sub 456CF4 function of the /boafrm/formSysCmd endpoint to...

CVE-2024-10914

CVE-2024-10914 Test della vulnerabilità di iniezione di comandi per D-Link NASTest manuale con Burp Suite Dork per trovare dispositivi vulnerabili Utilizza il seguente dork di ricerca per trovare dispositivi D-Link NAS potenzialmente vulnerabili: root@kitploit: FOFA: app="DLink-DNS-ShareCenter" &...

Komfy-Switch-Wifi-Password-Disclosure

Komfy-Switch-Wifi-Password-Disclosure Intro Questa analisi descrive la mia scoperta sul Komfy Switch with Camera di D-Link per recuperare l'SSID e la password WiFi associati al dispositivo via bluetooth 4.0 BLE. Il Komfy switch è un prodotto per la sicurezza domestica e l'automazione che può...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

Questo repository non contiene un README...

CVE-2025-2620-poc

Exploit Proof-of-Concept per CVE-2025-2620 Panoramica Questa repository contiene un exploit proof-of-concept PoC avanzato per CVE-2025-2620 , una vulnerabilità critica di buffer overflow basato su stack scoperta nel router D-Link DAP-1620 con versione firmware 1.03. Questa vulnerabilità consente ...

CVE-2023-51119

CVE-2023-51119 Controllo di accesso improprio sul router D-Link DIR-605L Spiegazione dello sfruttamento: A causa di un controllo di accesso errato, è possibile eseguire un takeover dell'account amministratore senza alcun tipo di autenticazione inviando una richiesta in circostanze speciali è...

Turvan6rkus-CVE-2024-3273

🛠️ Dispositivi D-Link Network Attached Storage - Iniezione di Comandi 🌟 Contesto I dispositivi D-Link Network Attached Storage NAS o storage di rete sono dispositivi con uno o più hard disk collegati a una rete informatica per l'archiviazione e la condivisione di file. A differenza di un normale...

CVE-2024-3273-EXPLOIT

CVE-2024-3273 – D-Link Remotecodeausführung RCE 💥 Eine kritische Sicherheitslücke, klassifiziert als CVE-2024-3273, wurde in mehreren D-Link-NAS-Geräten entdeckt, darunter DNS-320L, DNS-325, DNS-327L und DNS-340L, bis zum Datum 20240403. Diese Sicherheitslücke betrifft eine unbekannte Funktion de...

dlink

Injeção de Comando e Conta Backdoor em Dispositivos NAS da D-Link Resumo da Vulnerabilidade: A vulnerabilidade descrita afeta vários dispositivos NAS da D-Link, incluindo os modelos DNS-340L, DNS-320L, DNS-327L e DNS-325, entre outros. A vulnerabilidade está presente na URI nassharing.cgi , que é...

D-Link Network Attached Storage - Backdoor Account

A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...

dlink_shell_poc

dlinkshellpoc Dlink-Shell-PoC Getestet auf D-Link 815 Version A 1.3 Funktioniert mit: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Hinweis: Der PoC-Code verarbeitet keine Captchas. Beispiel root@kitploit: root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc....

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Report di test di penetrazione autorizzato D-Link DNS-320L NAS | Cliente: Otonata Overview Questo repository contiene il report completo di valutazione della sicurezza per un test di penetrazione autorizzato condotto su un dispositivo...

CVE-2025-26238

In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...

CVE-2025-26237

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: usb: asixdevices: add phymask for ax88772 mdio bus Without setting the phymask for the ax88772 mdio bus, the current driver may create at most 32 mdio PHY devices with PHY addresses ranging from 0x00 to 0x1f. The DLink...

CVE-2025-26237

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...