Directory traversal

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation...

PT-2024-1689

Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 1.6.5 libgit2 versions prior to 1.7.2 Description The issue is related to a heap corruption vulnerability in the has dir name function in src/libgit2/index.c, which can be exploited for arbitrary code execution. This...

D-Link DIR-X3260 prog.cgi Code Execution

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-0921

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

CVE-2024-0921

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

Command injection

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

CVE-2024-0921 D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

CVE-2024-0921 D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

CVE-2024-0921

CVE-2024-0921 affects D-Link DIR-816 A2 (firmware 1.10CNB04). The Web Interface file /goform/setDeviceSettings is vulnerable; manipulating the statuscheckpppoeuser parameter enables OS command injection. Attacks can be launched remotely and exploit details have been publicly disclosed. Multiple s...

CVE-2024-0921: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statuscheckpppoeuser leads to os command...

PT-2024-1399 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB04 Description: A critical vulnerability has been found in the Web Interface component of the D-Link DIR-816 A2, specifically in the /goform/setDeviceSettings file. The manipulation of the statuscheckpppoeuser...

D-Link DIR-882 sub_477AA0 Function Stack Buffer Overflow Vulnerability

The D-Link DIR-882 is a home wireless router that supports the latest IEEE802.11acWAVE2 wireless technology. The D-Link DIR-882 suffers from a stack buffer overflow vulnerability that stems from a buffer overflow issue in the sub477AA0 function. No detailed vulnerability details are provided at...

CVE-2024-22751

D-Link DIR-882 DIR882A1FW130B06 was discovered to contain a stack overflow via the sub477AA0 function...

CVE-2024-22751

D-Link DIR-882 DIR882A1FW130B06 was discovered to contain a stack overflow via the sub477AA0 function...

Stack overflow

D-Link DIR-882 DIR882A1FW130B06 was discovered to contain a stack overflow via the sub477AA0 function...

CVE-2024-22651

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

CVE-2024-22651

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

Command injection

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

CVE-2024-22651

Summary (validated by multiple sources): CVE-2024-22651 is a command-injection vulnerability in the D-Link DIR-815 router, specific to the cgibin binary’s ssdpcgi_main function in firmware v1.04. The issue enables unauthenticated network-exploitation with high impact across confidentiality, integ...

CVE-2024-22751

D-Link DIR-882 DIR882A1_FW130B06 is affected by a stack overflow in the sub_477AA0 function of the router firmware. The CVE describes a high-severity issue with network access, capable of impacting confidentiality, integrity, and availability. Connected sources identify multiple vulnerabilities i...