Komfy-Switch-Wifi-Password-Disclosure

Komfy-Switch-Wifi-Password-Disclosure Intro This writeup will detail my finding on D-Link's Komfy Switch with Camera to retrieve the device's associated wifi ssid and password over bluetooth 4.0 BLE. The Komfy switch is a home security and automation product that can replace a wall switch in your...

dlink_shell_poc

dlinkshellpoc Dlink shell PoC Tested on D-Link 815 Version A 1.3 Works with: DIR-110 DIR-412 DIR-600 DIR-610 DIR-615 DIR-645 https://vuldb.com/?id.7843 DIR-815 Note: PoC Code doe not handle captas. Example root@kali: ./dlinkshellpoc.py -h usage: dlinkshellpoc.py -h -p PASSWORD -u URL -x D-Link...

cve-2015-1187-dir820l-firmware-reverse-engineering

cve-2015-1187-dir820l-firmware-reverse-engineering Static firmware reverse engineering of CVE-2015-1187 in the D-Link DIR-820L using Strings, Ghidra, and Binwalk. Done by extracting MIPS root filesystem, identifying the ncc2 backend handler, and tracing pingaddr through command construction to...

dlink

Iniezione di comandi e account backdoor nei dispositivi NAS D-Link Riepilogo della vulnerabilità: La vulnerabilità descritta interessa diversi dispositivi NAS D-Link, inclusi i modelli DNS-340L, DNS-320L, DNS-327L e DNS-325, tra gli altri. La vulnerabilità risiede nell'URI nassharing.cgi , che è...

CVE-2026-95675

CVE-2026-95675 — D-Link DAP-1360 RevB Unauthenticated remote root command execution CWE-78 — OS Command Injection in the formSystemCheck handler, reachable via a hardcoded authentication backdoor. Verified against DAP-1360 RevB, firmware 2.14B05. Root Cause Two independent issues chained: 1...

Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Authorized Penetration Test Report D-Link DNS-320L NAS | Client: Otonata Overview This repository contains the full security assessment report for an authorized penetration test conducted on a D-Link DNS-320L NAS device for client...

CVE-2025-2620-poc

CVE-2025-2620 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-2620 , a critical stack-based buffer overflow vulnerability discovered in the D-Link DAP-1620 router running firmware version 1.03. This vulnerability allows...

Turvan6rkus-CVE-2024-3273

🛠️ D-Link Network Storage Devices Command Injection 🌟 Background D-Link Network Attached Storage NAS device is a hard drive or drives device connected to a computer network for file storage and sharing. Unlike a regular external hard drive that is directly interfaced with a computer, a NAS device...

honeypot-dlink-CVE-2024-3273

honeypot-dlink-CVE-2024-3273 Quick and dirty honeypot for CVE-2024-3273. This template can be used to setup a basic honeypot in 10min. TL;DR: Find fofa, shodan, onyphe, .... Clone it with the wgetclonehttp.sh. Manual tinkering to make the honeypot more realistic cloning isn't perfect so some file...

D-Link-CVE-2021-27342-exploit

D-Link-CVE-2021-27342-exploit Exploit for CVE-2021-27342 vulnerability telnet authentication brute-force protection bypass...

CVE-2023-51119

CVE-2023-51119 Improper Access Control on D-Link DIR-605L router Exploitation explanation: Due to an incorrect access control, a takeover can be done over the admin account without any kind of authentication sending a request under special circumstances only needs a legitimate admin to be logged ...

D-Link - Remote Command Execution

A Remote Command Execution RCE vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file id: CVE-2021-45382 info: name: D-Link - Remote Command Execution author: king-alexander severity: critic...

The vulnerability of the udhcpd daemon in the microprogramming-based router software from D-Link, DIR-860LB1 and DIR-868LB1, allows a hacker to execute arbitrary commands.

The vulnerability of the udhcpd microprogramming software for D-Link DIR-860LB1 and DIR-868LB1 routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2022-34527_D-Link_DSL-3782_Router_command_injection

This repository does not have a README...

CVE-2026-82592

D-Link Router DIR-825M - Buffer Overflow in /boafrm/formDiskFormat Vulnerability Details Detail Information Field| Value ---|--- Vendor| D-Link Product| D-Link DIR-825M and other models sharing the same firmware codebase Affected Version| Firmware v1.1.8 Vulnerability Type| Stack-based Buffer...

Exploit for Injection in Dlink Dir-868L_B1_Firmware

CVE-2025-14659: D-Link DHCP Hostname Command Injection An Off...

dlink-dir610-exploits

Exploits for CVE-2020-9376 and CVE-2020-9377 https://vulners.com/cve/CVE-2020-9377 https://vulners.com/cve/CVE-2020-9376 https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182...

VulnCheck KEV: CVE-2024-23625

A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root...

Vulnerability-DLink-CVE-2025-14659

CVE-2025-14659 : Analyse de l'injection de commandes dans le démon DHCP de D-Link Projet Recreate CVE | Sécurité Offensive Auteur : Peter Lin Date : Mai 2026 Présentation du projet : CVE-2025-14659 a signalé une vulnérabilité d'injection de commandes ciblant le composant démon DHCP présent dans l...

D-Link - Unauthenticated Remote Code Execution

OS command injection vulnerability in soap.cgi soapcgimain in cgibin in D-Link DIR-880L DIR-880LREVAFIRMWAREPATCH1.08B04 and previous versions, DIR-868L DIR868LA1FW112b04 and previous versions, DIR-65L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and...