CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

Design/Logic Flaw

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

CVE-2022-38258

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

CVE-2022-38258

The CVE-2022-38258 vulnerability affects D-Link DIR-819 (firmware v1.06) through a local file inclusion (LFI) in the web interface via the getpage parameter. The underlying issue allows an attacker to trigger a Denial of Service or access sensitive server information by crafting a crafted request...

D-Link DIR-819 has a path traversal vulnerability

D-Link DIR-819 is a wireless dual-band router from China AUO D-Link. A security vulnerability exists in the D-Link DIR-819 v1.06. An attacker can exploit this vulnerability to cause a denial of service DoS or access sensitive server information by manipulating the getpage parameter in a specially...

CVE-2022-38258: Improper Limitation of a Pathname to a Restricted Directory

A local file inclusion LFI vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a Denial of Service DoS or access sensitive server information via manipulation of the getpage parameter in a crafted web request...

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information...

CVE-2022-31414

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2022-31414

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2022-31414

The CVE-2022-31414 issue affects D-Link DIR-1960, specifically firmware DIR-1960_A1_1.11. The vulnerability is a buffer overflow in prog.cgi triggered via the srtcat function, allowing an attacker to cause a Denial of Service (DoS) through a crafted HTTP request to the router’s /prog.cgi endpoint...

CVE-2022-31414

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2022-31414: Buffer Copy without Checking Size of Input

D-Link DIR-1960 firmware DIR-1960A11.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. This vulnerability allowed attackers to cause a Denial of Service DoS via a crafted HTTP request...

PT-2022-20735 · D Link · D-Link Dir-1960

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1960 version DIR-1960 A1 1.11 Description: A buffer overflow issue was discovered via srtcat in prog.cgi, allowing attackers to cause a Denial of Service DoS via a crafted HTTP request to the /prog.cgi API endpoint. Recommendations...

D-Link DIR-1960 security vulnerabilities

The D-Link DIR-1960 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-1960 firmware version DIR-1960A11.11, which originates from a buffer overflow inclusion in prog.cgi via srtcat, which allows an attacker to trigger a denial of service DoS via a...

CVE-2022-2436

The Download Manager plugin for WordPress is vulnerable to deserialization of untrusted input via the 'filepackagedir' parameter in versions up to, and including 3.2.49. This makes it possible for authenticated attackers with contributor privileges and above to call files using a PHAR wrapper tha...

VulnCheck KEV: CVE-2022-26258

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution...

PT-2022-6251

Name of the Vulnerable Software and Affected Versions D-Link DIR-825 versions 1.33.0.44ebdd4-embedded and below Description The issue is related to a buffer overflow in the jsonrpc service of the D-Link DIR-825 router's firmware, which can be exploited by an attacker to execute arbitrary code or...

CVE-2022-37129

D-Link DIR-816 A2v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand. After the user passes in the command parameter, it will be spliced into byte4836B0 by snprintf, and finally doSystem&byte4836B0; will be executed, resulting in a command injection...