EUVD-2018-3047

Malware in sbrugna...

Unauthorized Access Vulnerability in D-link DIR-629

AUO D-Link DIR-629 450M Wireless Router 3 High Power Blade Antenna Home Broadband Router. An unauthorized access vulnerability exists in the D-link DIR-629, which can be exploited by attackers to gain unauthorized access to sensitive information...

The vulnerability of the weblogin_log function in the D-Link DIR-629-B1 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the webloginlog function /htdocs/cgibin of the D-Link DIR-629-B1 router microprogramming system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a denial-of-service attack by sending a specially crafted...

D-Link DIR-629-B1 'weblogin_log' function buffer overflow vulnerability

The D-Link DIR-629-B1 is a router device from AUO D-Link. A security vulnerability exists in the 'webloginlog' function in /htdocs/cgibin in the D-Link DIR-629-B1. An attacker can exploit this vulnerability by sending a session.cgi?ACTION=logout request with a long REMOTEADDR environment variable...

CVE-2018-10996

The webloginlog function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service buffer overflow via a session.cgi?ACTION=logout request involving a long REMOTEADDR environment variable...

CVE-2018-10996

The CVE-2018-10996 issue affects D-Link DIR-629-B1 routers, specifically the weblogin_log function in /htdocs/cgibin. A long REMOTE_ADDR in a session.cgi?ACTION=logout request can trigger a buffer overflow, allowing arbitrary code execution or a denial of service. No remediation details are provi...

D-Link DIR-629 and DIR-823 Remote Stack Overflow Vulnerability

The D-Link DIR-629 and DIR-823 are both wireless router products from AUO D-Link. A remote stack overflow vulnerability exists in the D-Link DIR-629 and DIR-823. The vulnerability is caused by a buffer overflow in soap.cgi due to the use of the sprintf function to splice the HTTPSOAPACTION field ...

D-Link soap.cgi Stack Buffer Overflow(CVE-2018-5318)

作者：Chu 1. 前言 老板前一段给买了几款路由把玩，研究了下 D-Link DIR 629、DIR 823 这两款板子。 发现在 soap.cgi 中存在几处栈溢出，均可以远程利用，并且其他型号的路由也有对 soap 这一部分代码的复用。 2. 逆向分析与漏洞挖掘 因为是想挖几个能远程利用的洞，首先去看了 HTTP 服务，也就是 /htdocs/cgibin。 D-Link HTTP 服务由cgibin提供，并通过软链接的文件名进入到不同的处理分支： 在各个 cgi 处理函数中，会通过 cgibinparserequest 来解析用户输入，其函数原型大致如下： 参数...