Lucene search
+L

1735 matches found

NVD
NVD
added 2019/09/27 12:15 p.m.27 views

CVE-2019-16920

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers...

10CVSS10AI score0.99996EPSS
SaveExploits5References5
Prion
Prion
added 2019/09/27 12:15 p.m.31 views

Command injection

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers...

10CVSS9.9AI score0.99996EPSS
SaveExploits5References4Affected Software3
Cvelist
Cvelist
added 2019/09/27 11:34 a.m.49 views

CVE-2019-16920

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a "PingTest" device common gateway interface that could lead to common injection. An attacker who successfully triggers...

10AI score0.99996EPSS
SaveExploits5References4
CVE
CVE
added 2019/09/27 11:34 a.m.1148 views

CVE-2019-16920

CVE-2019-16920 is an unauthenticated remote code execution flaw in D-Link consumer routers (DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, DIR-825, and others) triggered by arbitrary input to the PingTest CGI, allowing command injection and full system comp...

10CVSS9.8AI score0.99996EPSS
SaveIn wildExploits5References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2019/09/27 12:00 a.m.44 views

CVE-2019-16920

Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary input to a “PingTest” device common gateway interface that could lead to common injection. An attacker who successfully triggers...

10CVSS9.9AI score0.99996EPSS
SaveIn wildExploits5References6
OSV
OSV
added 2019/06/11 8:29 p.m.10 views

CVE-2019-3413

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked...

5.4CVSS5.7AI score0.00636EPSS
SaveExploits0References1
NVD
NVD
added 2019/06/11 8:29 p.m.28 views

CVE-2019-3413

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked...

5.4CVSS5.2AI score0.00636EPSS
SaveExploits0References1
Prion
Prion
added 2019/06/11 8:29 p.m.18 views

Cross site scripting

All versions up to V20.18.40.R7.B1of ZTE NetNumen DAP product have an XSS vulnerability. Due to the lack of correct validation of client data in WEB applications, which results in users being hijacked...

3.5CVSS5.2AI score0.00636EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/06/11 7:52 p.m.97 views

CVE-2019-3413

The CVE-2019-3413 entry concerns an XSS vulnerability in ZTE NetNumen DAP. All versions up to V20.18.40.R7.B1 are affected due to insufficient validation of client data in Web applications, which can lead to user account hijacking. The connected documents confirm the issue and reiterate the same ...

5.4CVSS5.2AI score0.00636EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/04/15 12:00 a.m.16 views

Multiple D-Link Products Input Validation Error Vulnerability

D-Link DAP-1530 and so on are products of Taiwan, China AUO D-Link.D-Link DAP-1530 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link DWR-111 is a wireless router.D-Link DAP-1610 is a wireless signal extender.D-Link DAP-1610 is a wireless signal extender.D-Link...

10CVSS7.5AI score0.74276EPSS
SaveExploits1References1
CVE
CVE
added 2019/04/11 3:22 p.m.86 views

CVE-2018-19300

CVE-2018-19300 affects multiple D-Link devices (DAP-1530/A1 before 1.06b01; DAP-1610/A1 before 1.06b01; DWR-111/A1 before 1.02v02; DWR-116/A1 before 1.06b03; DWR-512/B1 before 2.02b01; DWR-711/A1 up to 1.11; DWR-712/B1 before 2.04b01; DWR-921/A1 before 1.02b01; DWR-921/B1 before 2.03b01). The vul...

10CVSS9.7AI score0.74276EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
added 2018/11/29 12:00 a.m.17 views

Intelbras NCLOUD Devices Detection (HTTP)

HTTP based detection of Intelbras NCLOUD devices. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:embedthis:goahead"; ifdescripti...

7.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/11/08 12:00 a.m.82 views

D-Link DWR/DAP 'EXCU_SHELL' RCE Vulnerability - Active Check

D-Link DWR and DAP Routers are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

10CVSS9.7AI score0.74276EPSS
SaveExploits1References3
CNVD
CNVD
added 2018/07/26 12:00 a.m.6 views

D-Link DAP-1360 File Path Traversal and Cross-Site Scripting Vulnerability

The D-Link DAP-1360 is a wireless router. A file path traversal and cross-site scripting vulnerability exists in the D-Link DAP-1360, which allows remote attackers to read passwords via incorrect parameters, leading to an absolute path traversal attack...

6.4AI score
SaveExploits0References1
exploitpack
exploitpack
added 2018/07/24 12:00 a.m.36 views

D-link DAP-1360 - Path Traversal Cross-Site Scripting

D-link DAP-1360 - Path Traversal Cross-Site Scripting Exploit Title: D-Link DAP-1360 File path traversal and Cross site scriptingreflected can lead to Authentication Bypass easily. Date: 20-07-2018 Exploit Author: r3m0t3nu11 Contact : http://twitter.com/r3m0t3nu11 Vendor : www.dlink.com Version:...

SaveExploits0
Exploit DB
Exploit DB
added 2018/07/24 12:00 a.m.47 views

D-link DAP-1360 - Path Traversal / Cross-Site Scripting

Exploit Title: D-Link DAP-1360 File path traversal and Cross site scriptingreflected can lead to Authentication Bypass easily. Date: 20-07-2018 Exploit Author: r3m0t3nu11 Contact : http://twitter.com/r3m0t3nu11 Vendor : www.dlink.com Version: Hardware version: F1 Firmware version: 6.O5 Tested...

5.3AI score
SaveExploits0
zdt
zdt
added 2018/07/24 12:00 a.m.39 views

D-link DAP-1360 - Path Traversal / Cross-Site Scripting Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: D-Link DAP-1360 File path traversal and Cross site scriptingreflected can lead to Authentication Bypass easily. Date: 20-07-2018 Exploit Author: r3m0t3nu11 Contact : http://twitter.com/r3m0t3nu11 Vendor : www.dlink.com...

0.2AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2018/07/01 12:00 a.m.10 views

D-Link DAP-1160 Unauthenticated Remote Configuration Remote Reboot - Ver2

A vulnerability exists in D-Link DAP-1160. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

5.7AI score
SaveExploits0
CNVD
CNVD
added 2017/05/02 12:00 a.m.3 views

D-Link DAP-1360 Cross-Site Request Forgery Vulnerability (CNVD-2017-07250)

D-Link DAP-1360 with is a router. The D-Link DAP-1360 suffers from a cross-site request forgery vulnerability that can be exploited by a remote attacker to have elevated privileges by performing a CSRF attack using a domain name...

7AI score
SaveExploits0References1
CVE
CVE
added 2017/04/21 3:00 p.m.55 views

CVE-2016-1558

The CVE-2016-1558 entry concerns a buffer overflow in multiple D-Link router models (DAP-2310 2.06 and earlier; DAP-2330 1.06 and earlier; DAP-2360 2.06 and earlier; DAP-2553 B1 3.05 and earlier; DAP-2660 1.11 and earlier; DAP-2690 3.15 and earlier; DAP-2695 1.16 and earlier; DAP-3320 1.00 and ea...

10CVSS9.5AI score0.09104EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder