CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344: Improper Neutralization of Special Elements used in a Command

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33342

D-Link DIR-822+ V1.0.5 was found to contain a command injection in SetPlcNetworkpwd function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ftext function of uploadfirmware.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33344

The D-Link DIR-822+ wireless router, specifically version V1.0.5 , contains a command injection vulnerability in the ftext() function of the upload_firmware.cgi script. The root cause is the failure to neutralize special elements used in the operating system's command when processing the UPLOAD_F...

D-Link DIR-822 security vulnerabilities

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the SetPlcNetworkpwd function of prog.cgi, allowing remote attackers to execute arbitrary commands via...

CVE-2024-33342

The D-Link DIR-822+ wireless router (version V1.0.5 ) is vulnerable to a command injection flaw in the SetPlcNetworkpwd function of the prog.cgi script. The root cause is a failure to neutralize special elements used in operating system commands when processing the local_plc parameter. This allow...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

D-Link DIR-822 security vulnerabilities

The D-Link DIR-822 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-822+ version V1.0.5, which originates from a command injection contained in the ChgSambaUserSettings function of prog.cgi, allowing remote attackers to execute arbitrary commands...

CVE-2024-33343: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

CVE-2024-33343

D-Link DIR-822+ V1.0.5 was found to contain a command injection in ChgSambaUserSettings function of prog.cgi, which allows remote attackers to execute arbitrary commands via shell...

PT-2024-3192 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.5 Description: The issue is related to a command injection vulnerability in the ftext function of the upload firmware.cgi script in the D-Link DIR-822+ firmware. This vulnerability is due to the lack of proper...

Exploit for CVE-2023-51119

CVE-2023-51119 Improper Access Control on D-Link DIR-605L rout...

D-Link DIR-868L scandir.sgi Code Execution

The vulnerability of the scandir.sgi file of the D-Link DIR-868L router software is caused by buffer overflow on the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

PT-2024-21529

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an endless loop in directory parsing. If a directory contains a block with only ". afsXXXX" files from an uncompleted silly-rename, these files are skipped withou...

PT-2024-3332 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router versions v1.01KRb03 and before Description: The issue is related to a Permission Bypass vulnerability via the getcfg.php component. It is associated with inadequate access control when handling the AUTHORIZED GROUP...

PT-2024-3333 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and before Description: The issue is related to a command injection vulnerability via the hnap main function. This vulnerability is associated with the failure to neutralize special elements used in th...

Nginx WebUI Path Traversal Vulnerability

nginxWebUI is an nginx web configuration tool. A path traversal vulnerability exists in nginxWebUI, which stems from the failure of the dir parameter of the findCountByQuery method of the /adminPage/www/addOver file to correctly filter for special elements in the path of a resource or file. An...

dir-shop.cz Cross Site Scripting vulnerability OBB-3902761

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

D-Link Dir-3040us Denial of Service Vulnerability

The D-Link Dir-3040us is a router. A denial of service vulnerability exists in the D-Link Dir-3040us, which can be exploited by an attacker to cause a system crash and reboot...