Lucene search
+L

1735 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.12 views

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS8AI score0.00931EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.16 views

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the webproc script in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8.3AI score0.01101EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:00 a.m.13 views

The vulnerability of the UPGCGI_CheckAuth() function in D-Link’s wireless access points DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the UPGCGICheckAuth function in D-Link’s wireless access points DAP-2020 and DAP-1360 is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.8CVSS8.3AI score0.01134EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/05 12:00 a.m.12 views

The vulnerability of the request handler /cgi-bin/webproc in wireless access points from the microprogramming software D-Link DAP-2020 and DAP-1360 allows a hacker to execute arbitrary code.

The vulnerability of the request processor/cgi-bin/webproc in wireless access points from D-Link, models DAP-2020 and DAP-1360, relates to the possibility of buffer overflow based on a stack mechanism. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

8.8CVSS8.3AI score0.01155EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.43 views

D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. When parsing t...

7.5CVSS7.4AI score0.00913EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.34 views

D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The issue...

8.8CVSS7.3AI score0.01038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.25 views

D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. When parsin...

8.8CVSS7.4AI score0.01101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.32 views

D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. When parsing t...

8.8CVSS7.4AI score0.01155EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.31 views

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of login requests to the web-based user interface. The...

8.8CVSS7AI score0.00916EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.43 views

D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /cgi-bin/webproc endpoint. When parsing the errorpage and nextpage...

8.8CVSS7.4AI score0.01101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.34 views

D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. When parsin...

8.8CVSS7.4AI score0.01101EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.30 views

D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling requests to the /cgi-bin/webproc endpoint. The issue...

8.8CVSS7.3AI score0.01038EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.42 views

D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webupg endpoint. The issue...

8.8CVSS7.5AI score0.01134EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.33 views

D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The issue...

7.5CVSS7.4AI score0.00931EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/04 12:00 a.m.28 views

D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webproc endpoint. The...

4.3CVSS6.2AI score0.01167EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/04/19 12:00 a.m.42 views

D-Link DAP-1320 < 1.21b05 RCE Vulnerability

D-Link DAP-1320 devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS7.7AI score0.0329EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/03/14 12:00 a.m.25 views

Fedora: Security Advisory for golang-github-google-dap (FEDORA-2023-3dba09f630)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS7.1AI score0.05623EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/03/13 12:00 a.m.37 views

Fedora 38 : golang-github-google-dap (2023-3dba09f630)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-3dba09f630 advisory. Fix missing update for golang-github-google-dap v0.7.0 for Fedora 38. Fixes CVE-2022-41717. Tenable has extracted the preceding description block directly fr...

5.3CVSS7AI score0.05623EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/02/27 12:00 a.m.15 views

D-Link DAP Device Detection Consolidation

Consolidation of D-Link DAP devices detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/02/24 12:00 a.m.33 views

D-Link DAP-1533 Devices RCE Vulnerability (Sep 2019)

D-Link DAP-1533 devices are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS9.6AI score0.99996EPSS
SaveExploits5References6
Rows per page
Query Builder