PT-2022-2079 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850 versions ET850-1.08TRb03 Description: The issue is related to errors in loading configuration files in the D-Link DIR-850 router's firmware. It allows a remote attacker to redirect users to an arbitrary URL due to an incorrect...

CVE-2022-25106: Out-of-bounds Write

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgimain. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...

D-Link DIR-859 buffer error vulnerability

The D-Link DIR-859 is a wireless router from D-Link, Taiwan, China.A security vulnerability exists in the D-Link DIR-859 v1.05, which stems from the function genacgimain containing a stack-based buffer overflow. An attacker could exploit this vulnerability to trigger a denial of service DoS via a...

CVE-2022-25412

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

CVE-2022-25412: Improper Limitation of a Pathname to a Restricted Directory

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /adminpage/all-files-update-ajax.php via the dir and deletefile parameters...

PT-2022-17276

Name of the Vulnerable Software and Affected Versions Maxsite CMS version v180 Description The issue allows for arbitrary file deletion. This is achieved through the /admin page/all-files-update-ajax.php endpoint via the dir and deletefile parameters. Recommendations For Maxsite CMS version v180,...

DIR846 Firmware Arbitrary Command Execution

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands using a...

DIR846 Firmware Arbitrary Command Execution

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

DIR846 Firmware Arbitrary Command Execution

The vulnerability of the DIR846A1FW100A43.bin and DIR846enFW100A53DLA-Retail.bin microprogramming systems of D-Link DIR-846 routers is related to insufficient checking of arguments passed in commands. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands using a...

D-Link DIR-X1860 DoS

The vulnerability of the web-based application of D-Link DIR-X1860 wireless routers is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially created web page...

D-Link DIR-X1860 Code Execution

The vulnerability of the web application of D-Link DIR-X1860 Wi-Fi routers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created website...

D-Link DIR-X1860 HTTP Request Smuggling

The vulnerability of the web application developed with microprogramming software for D-Link DIR-X1860 is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests HTTP Request Smuggling attack using specially created...

D-Link DIR-882 Command Injection Vulnerability

The D-Link DIR-882 is a gigabit enterprise router from China Youxun D-Link. The D-Link DIR-882 suffers from a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15176)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the wl0. 0 maclist parameter to execute arbitrary commands...

D-Link DIR-878 Operating System Command Injection Vulnerability

D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company in China. The D-Link DIR-878 is vulnerable to an operating system command injection vulnerability, which stems from the inclusion of a command injection vulnerability in a system function. An attacker could exploit the...

D-Link DIR-846 Command Execution Vulnerability (CNVD-2022-38534)

The D-Link DIR-846 is a wireless router from D-Link, a Taiwan-based company, and a command execution vulnerability exists in the D-Link DIR-846. The vulnerability can be exploited by attackers to cause remote code execution...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15175)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the sambaname parameter...

D-Link DIR-878 OS Command Injection Vulnerability (CNVD-2022-14785)

D-Link DIR-878 is a wireless router from D-Link Taiwan, China. The D-Link DIR-878 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary commands via crafted HNAP1 POST requests...

D-Link DIR-846 Command Execution Vulnerability

A command execution vulnerability exists in the D-Link DIR-846, a wireless router from D-Link in Taiwan, China, which originates in the product HNAP1/control/SetNetworkTomographySettings.php file. The vulnerability is caused by the fact that the HNAP1/control/SetNetworkTomographySettings.php file...

D-Link Dir-823-Pro Command Injection Vulnerability

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro 1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via the tomographypingaddress, tomographypingnumber, tomographypingsize,...