Lucene search
+L

7 matches found

Vulnrichment
Vulnrichment
•added 2024/07/05 1:00 p.m.•23 views

CVE-2024-6525 D-Link DAR-7000 decodmail.php deserialization

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to deserialization. The attack may be launched...

5.1CVSS6.8AI score0.0308EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/05 12:00 a.m.•3 views

CVE-2024-6525: Deserialization of Untrusted Data

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to deserialization. The attack may be launched...

8.8CVSS5.4AI score0.0308EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2023/09/06 12:00 a.m.•15 views

The vulnerability of the decodmail.php script in the D-Link DAR-8000-10 router’s software allows a hacker to execute arbitrary commands.

The vulnerability of the decodmail.php script in the D-Link DAR-8000-10 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

5.1CVSS6.5AI score0.06838EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/09/01 8:15 p.m.•20 views

CVE-2023-4711

A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. Th...

8.1CVSS5.1AI score0.06838EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/01 12:00 a.m.•3 views

CVE-2023-4711: Improper Neutralization of Special Elements used in an OS Command

A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. Th...

8.1CVSS5.6AI score0.06838EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/08/19 12:00 a.m.•4 views

PT-2023-4761

Name of the Vulnerable Software and Affected Versions D-Link DAR-8000-10 up to 20230819 Description The issue is related to the decodmail.php script in the D-Link DAR-8000-10 router's firmware, where it fails to neutralize special elements used in an operating system command. This can be exploite...

8.1CVSS6.4AI score0.06838EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/18 12:00 a.m.•1 views

CVE-2023-4414: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230807. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to command injection. The attack can be...

9.8CVSS6.5AI score0.09092EPSS
SaveExploits1References2
Rows per page
Query Builder