D-Link DAP-1360 < 2.5.4 Multiple CSRF Vulnerabilities

D-Link DAP-1360 devices are prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

D-Link DAP Devices Detection (HTTP)

HTTP based detection of D-Link DAP Devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Android Qualcomm QDSP6v2 Driver Denial of Service Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the sound/soc/msm/qdsp6v2/msm-ds2- dap-config.c file in the Qualcomm QDSP6v2 driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the applicatio...

Android Qualcomm QDSP6v2 Driver Denial of Service Vulnerability (CNVD-2016-09482)

Android is an open source operating system based on Linux. A security vulnerability in the sound/soc/msm/qdsp6v2/msm-ds2- dap-config.c file in the Qualcomm QDSP6v2 driver for Android allows remote attackers to exploit the vulnerability to build malicious applications that can crash the applicatio...

D-link DIR-890L HNAP 未授权信息泄漏漏洞

HNAPHome Network Administration Protocol,家庭网络管理协议是一种基于SOAPSimple Object Access Protocol,简单对象管理协议的协议，和UPnP很像，通常被D-Link的”EZ”设置程序用来初始化设置路由器。 存在问题代码： / Grab a pointer to the SOAPAction header / SOAPAction = getenv"HTTPSOAPACTION"; / Skip authentication if the SOAPAction header contains...

D-Link DAP-1160 Authentication Bypass

The IS-2010-005 advisory describes a vulnerability in the D-Link DAP-1160, that allows for authentication bypass and complete device reconfiguration. Authentication can be bypassed by accessing the URL: http://IPADDR/toolsfirmw.htm within 40 seconds of the web server start, and consequently after...

The vulnerability of the HNAP interface of the D-Link DAP-1320 wireless router allows a hacker to execute arbitrary code.

The vulnerability of the HNAP interface of the D-Link DIR-645 wireless router relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the microprogrammed software of the D-Link DAP-1320 wireless access point allows a intruder to execute arbitrary code.

The vulnerability of the microprogrammed software in the D-Link DAP-1320 wireless access point allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the microprogrammed software of the D-Link DAP-1320 wireless router allows a hacker to execute arbitrary code.

The vulnerability of the microprogrammed software of the D-Link DIR-645 wireless router allows a malicious actor to execute arbitrary code remotely...

D-Link Devices UPnP SOAPAction-Header Command Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'D-Link Devices UPnP SOAPAction-Header Command Execution', 'Description' = %q Different D-Link Routers are vulnerable to OS command...

D-Link DAP-1320 Rev Ax is vulnerable to a command injection

Overview The D-Link DAP-1320 Rev Ax firmware update mechanism contains a command injection vulnerability. Description CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' A remote unauthenticated attacker may execute commands on the device by taking...

CVE-2015-2050

D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors...

Command injection

D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors...

CVE-2015-2050

D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors...

CVE-2015-2050

CVE-2015-2050 affects D-Link DAP-1320 Rev Ax with firmware before 1.21b05. A remote attacker can execute arbitrary commands via unspecified vectors over the network (no authentication). Related sources cite a remote code execution/command injection vulnerability tied to the device’s firmware/upda...

PT-2015-1276 · D Link · D-Link Dap-1320

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1320 Rev Ax with firmware prior to 1.21b05 Description: The issue allows attackers to execute arbitrary commands via unspecified vectors. A remote attacker can execute arbitrary code. Recommendations: For D-Link DAP-1320 Rev Ax wit...

D-Link Devices HNAP SOAPAction-Header Command Execution

Different D-Link Routers are vulnerable to OS command injection in the HNAP SOAP interface. Since it is a blind OS command injection vulnerability, there is no output for the executed command. This module has been tested on a DIR-645 device. The following devices are also reported as affected:...

CVE-2014-10027

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that 1 change the MAC filter restrict mode, 2 add a MAC address to the filter, or 3 remove a MAC...

CVE-2014-10026

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the clientlogin cookie to admin...

CVE-2014-10025

Multiple cross-site request forgery CSRF vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the 1 Enable Wireless, 2 MBSSID, 3 BSSID, 4 Hide Access Point, 5 SSID, 6 Country, 7 Channel...