CVE-2024-22651

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

CVE-2024-22751

D-Link DIR-882 DIR882A1FW130B06 was discovered to contain a stack overflow via the sub477AA0 function...

CVE-2024-22651

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

CVE-2024-22651: Improper Neutralization of Special Elements used in a Command

There is a command injection vulnerability in the ssdpcgimain function of cgibin binary in D-Link DIR-815 router firmware v1.04...

CVE-2024-22751: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06 was discovered to contain a stack overflow via the sub477AA0 function...

D-Link DIR-815 Security Vulnerability

The D-Link DIR-815 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-815 v1.04, which originates from a command injection vulnerability in the ssdpcgimain function of the cgibin binary...

D-Link DIR-822 Router Arbitrary Command Execution

The vulnerability of the SetStaticRouteSettings function in D-Link DIR-822 router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

HNAP1 Interface D-Link DIR-822 Router Access

The vulnerability of the HNAP1 interface of D-Link DIR-822 microprogrammed router software is related to the absence of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to access administrator accounts with empty passwords...

D-Link DIR-X3260 Stack Overflow Vulnerability (CNVD-2026-19785)

The D-Link DIR-X3260 is a wireless router device from China's AUO D-Link. The D-Link DIR-X3260 suffers from a stack overflow vulnerability that can be exploited by a remote attacker to submit a special request that can crash an application or execute arbitrary code in the application context...

CVE-2024-0769

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...

CVE-2024-0769

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...

Path traversal

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...

CVE-2024-0769

CVE-2024-0769 corresponds to a path-traversal vulnerability in D-Link DIR-859 routers (affected file: /hedwig.cgi). Connected sources confirm the issue is triggered by manipulating the service argument with ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml, enabling remote access. The affected...

CVE-2024-0769 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...

CVE-2024-0769 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...

WordPress Backup Migration 1.3.7 Remote Command Execution Exploit

This Metasploit module exploits an unauthenticated remote command execution vulnerability in WordPress Backup Migration plugin versions 1.3.7 and below. The vulnerability is exploitable through the Content-Dir header which is sent to the /wp-content/plugins/backup-backup/includes/backup-heart.php...

CVE-2024-0769

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...

CVE-2024-0769: Improper Limitation of a Pathname to a Restricted Directory

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input...

SUSE CVE-2024-22365

linux-pam aka Linux PAM before 1.6.0 allows attackers to cause a denial of service blocked login process via mkfifo because the openat call for protectdir lacks ODIRECTORY...

D-Link DIR-X3260 prog.cgi Code Execution

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...