10335 matches found
CVE-2023-2117
The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the getsubdirs ajax action, allowing a high privileged users such as admins to inspect names of files and directories outside of the sites root...
CVE-2023-2117
The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the getsubdirs ajax action, allowing a high privileged users such as admins to inspect names of files and directories outside of the sites root...
PT-2023-17958 · 10Web · The Image Optimizer
Name of the Vulnerable Software and Affected Versions: The Image Optimizer by 10web WordPress plugin versions prior to 1.0.27 Description: The issue allows high-privileged users, such as admins, to inspect names of files and directories outside of the site's root. This is due to the plugin not...
CVE-2023-2117: Undefined Security Weakness
The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the getsubdirs ajax action, allowing a high privileged users such as admins to inspect names of files and directories outside of the sites root...
D-Link DIR-825 Router Command Injection
The vulnerability of D-Link DIR-825 router’s microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created POST request, ntpsync.cgi, through the ntpserver...
D-Link DIR-620 Privilege Escalation
The vulnerability of the web interface of D-Link DIR-620 microprogrammed software routers is related to the use of pre-installed registration data. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...
PT-2023-3096 · D Link · D-Link Dir-842
Name of the Vulnerable Software and Affected Versions: D-Link DIR-842V2 version 1.0.3 Description: The issue is related to a command injection vulnerability in the iperf3 diagnostics function. This vulnerability is associated with a lack of data sanitization at the management level, which could...
PT-2023-3100 · D Link · D-Link Dir-842
Name of the Vulnerable Software and Affected Versions: D-Link DIR-842V2 version 1.0.3 Description: The issue allows attackers to execute arbitrary commands via importing a crafted file. This is related to the lack of data cleaning measures at the management level, which can be exploited by a remo...
D-Link DIR-816 A2 Code Execution
The vulnerability of the /goform/DDNS component of D-Link DIR-816 A2 microprogramming software lies in the fact that it allows for code execution beyond buffer boundaries. Exploiting this vulnerability can enable a hacker to execute arbitrary code...
D-Link DIR-823G Router Code Execution
The vulnerability of the ExportSettings.sh, uploadsettings.cgi, GetDownLoadSyslog.sh, and uploadfirmware.cgi components of the D-Link DIR-823G router’s microprogramming system is related to the possibility of bypassing authentication. Exploiting this vulnerability allows a malicious actor to...
D-Link DIR-816 A2 Arbitrary Command Execution
The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 router microprogramming systems exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
D-Link DIR-816 A2 Router Arbitrary Command Execution
The vulnerability of the /goform/form2systime.cgi microprogramming system for D-Link DIR-816 A2 exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
D-Link DIR-816 A2 Router Arbitrary Command Execution
The vulnerability of the NTPSyncWithHost function in D-Link DIR-816 A2 router microprogramming software exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
D-Link DIR-816 A2 router software Code Execution
The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogrammed software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
D-Link DIR-809 A1/A2 Authentication Bypass
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and download the configuration file remotely...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
