61 matches found
CVE-2024-41611
In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...
EUVD-2018-12684
Malware in sbrugna...
EUVD-2025-25013
Malicious code in bioql PyPI...
CVE-2025-9026
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-9026 D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-9026 D-Link DIR-860L Simple Service Discovery Protocol cgibin ssdpcgi_main os command injection
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-9026
CVE-2025-9026 affects D-Link DIR-860L (firmware 2.04.B04). The vulnerability is in the Simple Service Discovery Protocol component, specifically the ssdpcgi_main function in htdocs/cgibin, enabling remote OS command injection. Publicly disclosed exploit indicates active risk, with impact on confi...
PT-2025-33471 · D Link · D-Link Dir-860L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L version 2.04.B04 Description: A vulnerability exists in the Simple Service Discovery Protocol component of the D-Link DIR-860L router. The issue is due to a command injection flaw within the ssdpcgi main function located in th...
CVE-2025-9026: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
D-Link DIR-860L Multiple Vulnerabilities (2018 - 2025)
D-Link DIR-860L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-37605
A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
D-Link DIR-860L Denial of Service Vulnerability
The D-Link DIR-860L is a wireless router from China's AUO D-Link. The D-Link DIR-860L suffers from a denial of service vulnerability that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2024-37605
A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2024-37605
A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
D-Link DIR-860L 安全漏洞
The D-Link DIR-860L is a wireless router from China's AUO D-Link. The D-Link DIR-860L suffers from a denial of service vulnerability that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...
CVE-2024-37605
A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2024-37605
The D-Link DIR-860L router, specifically running REVB_FIRMWARE_2.04.B04_ic5b , is vulnerable to a NULL pointer dereference within the /sbin/httpd microprogramming system. The root cause is the incorrect checking of HTTP request formats , which allows a remote attacker to trigger a Denial of Servi...
CVE-2024-37605: NULL Pointer Dereference
A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2024-37605
A NULL pointer dereference in D-Link DIR-860L REVBFIRMWARE2.04.B04ic5b allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
The vulnerability in the script htdocs/webinc/js/adv_parent_ctrl_map.php of the D-Link DIR-860L, DIR-865L, DIR-868L, DIR-880L routers allows a attacker to execute an XSS attack.
The vulnerability in the script htdocs/webinc/js/advparentctrlmap.php of the D-Link DIR-860L, DIR-865L, DIR-868L, and DIR-880L routers exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows an attacker to execute an XSS attack through the...