21514 matches found
CVE-2013-10050
An OS command injection vulnerability exists in multiple D-Link routers confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13 via the authenticated toolsvct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid...
CVE-2013-10048 D-Link Devices command.php Unauthenticated RCE
An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 firmware ≤ 2.13 and ≤ 2.14b01, respectively—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker c...
CVE-2013-10048
The CVE-2013-10048 entry describes an OS command injection in legacy D-Link routers (DIR-300 rev B and DIR-600) due to unauthenticated input handling in the command.php endpoint. A remote attacker can send specially crafted POST requests to execute arbitrary shell commands with root privileges, e...
CVE-2013-10048 D-Link Devices command.php Unauthenticated RCE
An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 firmware ≤ 2.13 and ≤ 2.14b01, respectively—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker c...
CVE-2013-10050
An OS command injection vulnerability exists in multiple D-Link routers confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13 via the authenticated toolsvct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid...
CVE-2013-10050 D-Link Devices tools_vct.xgi Authenticated RCE
An OS command injection vulnerability exists in multiple D-Link routers confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13 via the authenticated toolsvct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid...
CVE-2013-10050
CVE-2013-10050 affects D-Link DIR-300 (rev A, v1.05) and DIR-615 (rev D, v4.13). An authenticated user can exploit the tools_vct.xgi CGI endpoint to inject commands via pingIp, leading to full device compromise (telnet daemon and root shell). The flaw is tied to firmware exposing tools_vct.xgi on...
CVE-2013-10050 D-Link Devices tools_vct.xgi Authenticated RCE
An OS command injection vulnerability exists in multiple D-Link routers confirmed on DIR-300 rev A v1.05 and DIR-615 rev D v4.13 via the authenticated toolsvct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid...
CVE-2013-10059 D-Link Routers tools_vct.htm OS Command Injection
An authenticated OS command injection vulnerability exists in various D-Link routers tested on DIR-615H1 running firmware version 8.04 via the toolsvct.htm endpoint. The web interface fails to sanitize input passed from the pingipaddr parameter to the toolsvct.htm diagnostic interface, allowing...
CVE-2013-10059 D-Link Routers tools_vct.htm OS Command Injection
An authenticated OS command injection vulnerability exists in various D-Link routers tested on DIR-615H1 running firmware version 8.04 via the toolsvct.htm endpoint. The web interface fails to sanitize input passed from the pingipaddr parameter to the toolsvct.htm diagnostic interface, allowing...
CVE-2013-10059
CVE-2013-10059 affects D-Link DIR-615H1 routers (firmware 8.04). An authenticated OS command injection exists in the tools_vct.htm diagnostic interface via the ping_ipaddr input, allowing arbitrary shell commands through backtick encapsulation. Exploitation can occur with default credentials on t...
Local Privilege Escalation
github.com/linuxdeepin/lastore-daemon is vulnerable to Local Privilege Escalation. The vulnerability is due to insecure D-Bus configuration due to allowing users in the sudo group to invoke the InstallPackage method without authentication, enabling arbitrary code execution as root via crafted .de...
D-Link DIR-615H1 安全漏洞
The D-Link DIR-615H1 is a wireless router from China's AUO D-Link. The D-Link DIR-615H1 suffers from a command injection vulnerability, which stems from insufficient cleanup of the toolsvct.htm endpoint input, that can be exploited by an attacker to cause remote code execution...
D-Link DIR-615和D-Link DIR-300 安全漏洞
The D-Link DIR-615 and D-Link DIR-300 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-300 rev A version 1.05 and the D-Link DIR-615 rev D version 4.13, which stems from insufficient cleanup of toolsvct.xgi endpoint inputs, and could lead to...
D-Link DIR-600和D-Link DIR-300 rev B 安全漏洞
The D-Link DIR-600 and D-Link DIR-300 rev B are both wireless routers from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-300 rev B and the D-Link DIR-600 version 2.13 and earlier and version 2.14b01 and earlier, which stems from improper handling of command.php endpoin...
The vulnerability of D-Link DCS-960L IP camera’s microprogramming software allows a intruder to execute arbitrary code by bypassing the authentication process using an alternative path or channel.
The vulnerability of D-Link DCS-960L IP camera software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-51385
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the yyxzdlinkasp function via the id parameter...
CVE-2025-51383
D-LINK DI-8200 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecroadasp function via the hostip parameter...
