D-Link D-View Code Execution Vulnerability

D-Link D-View is a network management system from D-Link, which is mainly used to centrally manage the performance, security and reliability of network devices. A code execution vulnerability exists in D-Link D-View, which can be exploited by an attacker to execute arbitrary code on an affected...

D-Link D-View Code Execution Vulnerability

D-Link D-View is a network management system from D-Link, which is mainly used to centrally manage the performance, security and reliability of network devices. A code execution vulnerability exists in D-Link D-View, which can be exploited by an attacker to execute arbitrary code...

Vulnerability of the /url/url.php script in D-Link DAR-7000 and DAR-8000 router microprogramming software, allowing a hacker to execute arbitrary code

The vulnerability of the /url/url.php script in D-Link’s router microprogramming software DAR-7000 and DAR-8000 is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the SetNetworkTomographySettings module in the microprogramming software for D-Link DIR-822+ allows a hacker to execute arbitrary code.

The vulnerability of the SetNetworkTomographySettings module in the microprogramming software of D-Link DIR-822+ routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the formTcpipSetup function in D-Link DIR-619L router software allows a hacker to cause a service failure.

The vulnerability of the formTcpipSetup function in D-Link DIR-619L router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using the curTime parameter...

The vulnerability of the formWlanSetup_wizard function in the D-Link DIR-619L router software allows a hacker to cause a service failure.

The vulnerability of the formWlanSetupwizard function in the D-Link DIR-619L router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using the webpage...

(0Day) D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640-US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within prog.cgi, which handles HNAP requests made to the lighttpd webserve...

(0Day) D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link G416 wireless routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP service listening on TCP port 80. The issue results from...

(0Day) D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. The...

(0Day) D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the execMonitorScript method...

(0Day) D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

(0Day) D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi program, which handles HNAP requests made t...

(0Day) D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of D-Link Network Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DNACore...

Vulnerability of the /useratte/resmanage.php script of the D-Link DAR-7000 and DAR-8000 routers, allowing a hacker to execute arbitrary code.

The vulnerability of the /useratte/resmanage.php script of the D-Link DAR-7000 and DAR-8000 router microprogramming systems is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VulnCheck KEV: CVE-2022-37055

D-Link Routers contains a buffer overflow vulnerability that has a high impact on confidentiality, integrity, and availability. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...

Vulnerability of the D-Link DAR-7000 and DAR-8000 router microprogramming system’s /firewall/urlblist.php script, allowing a hacker to execute arbitrary code

The vulnerability of the D-Link DAR-7000 and DAR-8000 router microprogramming systems’ /firewall/urlblist.php script is related to the unlimited download of malicious files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the formWlanGuestSetup function in the microprogramming software of the D-Link DIR-619L router allows a hacker to cause a service failure.

The vulnerability of the formWlanGuestSetup function in the D-Link DIR-619L router’s microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using the webpage...

The vulnerability of the goform/formWPS component of the D-Link DIR-619L router’s microprogramming system allows a hacker to induce a service failure.

The vulnerability of the goform/formWPS component of the D-Link DIR-619L router’s microprogramming system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failure...

PT-2024-9741 · D Link · D-Link Dap-1520

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1520 version REVA FIRMWARE 1.10B04 BETA02 HOTFIX Description: A NULL pointer dereference in the plugins call handle uri clean function allows attackers to cause a Denial of Service DoS via a crafted HTTP request without...

(0Day) D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of D-Link D-View. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the executeWmicCmd method. The...