1735 matches found
CVE-2021-44127
CVE-2021-44127 affects D-Link DAP-1360 F1 firmware versions <= v6.10. In the webupg binary, the attacker can use the file parameter with name=deleteFile after authorization to execute arbitrary system commands. This is documented across multiple sources (NVD entry and CNVD/CVE mirrors). The ex...
D-Link DAP-1360 安全漏洞
The D-Link DAP-1360 is a router from D-Link, a Chinese company. A security vulnerability exists in the DLink DAP-1360 F1 firmware, which stems from the fact that an attacker can execute arbitrary system commands with the name=deleteFile parameter, after authorization, using the file parameter to...
D-Link DAP-1620 Path Traversal Vulnerability
A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...
CVE-2021-46381
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...
CVE-2021-46381
Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading /etc/passwd and /etc/shadow...
CVE-2021-46381
CVE-2021-46381 affects the D-Link DAP-1620 (A1) device, where a path traversal leads to Local File Inclusion. The vulnerability allows reading sensitive internal files such as /etc/passwd and /etc/shadow via crafted input to the device’s web interface (notably through apply.cgi). Public exploit/m...
D-Link DAP-1620 路径遍历漏洞
A path traversal vulnerability exists in the D-Link DAP-1620, a wireless repeater extender from D-Link, Taiwan, China, which results from a path traversal in the D-Link DAP-1620 that causes local file inclusion to lead to unauthorized internal file reads of /etc/passwd and / etc/shadow. No detail...
Liferay Portal和Liferay DXP 跨站脚本漏洞
Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...
D-Link DAP-2020 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webproc endpoin...
D-Link DAP-2020 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webproc endpoin...
PT-2022-1944
Name of the Vulnerable Software and Affected Versions D-Link DAP-1620 affected versions not specified Description The issue is related to Local File Inclusion due to path traversal errors in the software, allowing unauthorized access to internal files. This can lead to the reading of sensitive...
The vulnerability of the webproc getpage implementation in the microprogramming software for wireless access points from D-Link, DAP-2020, allows a intruder to execute arbitrary code.
The vulnerability of the webproc getpage implementation in the microprogrammed wireless access points from D-Link, such as the DAP-2020, is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the WEB_CmdFileList() function implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.
The vulnerability of the WEBCmdFileList function implementation in D-Link DAP-2020 wireless access points relates to the lack of measures taken to neutralize special elements used in operating system commands when processing CGI scripts. Exploiting this vulnerability can allow an attacker to...
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflows in the stack when processing the var:menu parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflow on the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points allows a intruder to execute arbitrary code.
The vulnerability of the webproc script implementation in D-Link DAP-2020 wireless access points is related to buffer overflows during the processing of the var:page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2021-34863
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:page parameter provided to the webpr...
CVE-2021-34860
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...
CVE-2021-34862
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the var:menu parameter provided to the webpr...
CVE-2021-34860
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc001 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the getpage parameter provided to th...