PT-2022-1549

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to the implementation of the SetStationSettings function in the D-Link DIR-823-Pro wireless router's firmware, which is associated with insufficient input data sanitization when...

PT-2022-1548

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the SetStaticRouteSettings function. This vulnerability allows attackers to execute arbitrary commands via the staticroute list parameter...

PT-2022-1554

Name of the Vulnerable Software and Affected Versions D-Link DIR-823-Pro version 1.0.2 Description The issue is related to a command injection vulnerability in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary commands via the tomography ping...

CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the std::fs::removedirall standard library function is vulnerable a race condition enabling symlink following CWE-363. A...

CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the std::fs::removedirall standard library function is vulnerable a race condition enabling symlink following CWE-363. A...

PT-2022-2440

Name of the Vulnerable Software and Affected Versions D-Link DIR-825AC G1 affected versions not specified Description The issue is related to the incorrect handling of the cmd parameter in the cgi-bin/webupg component of the D-Link DIR-825AC G1 router's firmware. This can allow an attacker to...

PT-2022-2439

Name of the Vulnerable Software and Affected Versions D-Link DIR-825 G1 Description The issue is related to the "webupg" binary, where attackers can bypass authentication through the autoupgrade.asp parameter. This allows them to perform unauthorized actions, such as downloading configuration fil...

PT-2022-2086 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850 versions ET850-1.08TRb03 Description: The issue is related to insufficient access control in the router's firmware, which can be exploited by a remote attacker to redirect users to an arbitrary URL. This can potentially lead to...

Improper validation of Windows paths could lead to directory traversal attack

Path resolution in warp::filters::fs::dir didn't correctly validate Windows paths meaning paths like /foo/bar/c:/windows/web/screen/img101.png would be allowed and respond with the contents of c:/windows/web/screen/img101.png. Thus users could potentially read files anywhere on the filesystem. Th...

dir-to-iis-app (>=1.0.0, <=1.0.2), edtool (>=0.0.1, <=0.1.16) potentially affected by CVE-2021-45459 via node-windows (1.0.0-beta.1)

node-windows NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-windows and may be impacted: - dir-to-iis-app =1.0.0, =0.0.1, =0.1.16 Source cves: CVE-2021-45459 Source advisory: OSV:GHSA-53XV-C2HX-5W6Q...

dir-to-iis-app (>=1.0.0, <=1.0.2), edtool (>=0.0.1, <=0.1.16) potentially affected by CVE-2021-45459 via node-windows (1.0.0-beta.1)

node-windows NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-windows and may be impacted: - dir-to-iis-app =1.0.0, =0.0.1, =0.1.16 Source cves: CVE-2021-45459 Source advisory: GHSA-53XV-C2HX-5W6Q...

D-Link DIR-809 Firmware Buffer Overflow Code Execution

The vulnerability of the FUN80034d60 /formStaticDHCP function of the D-Link DIR-809 wireless router is related to stack buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the system using a specially crafted POST request...

D-Link DIR-2640 trust management issue vulnerability

D-Link DIR-2640 is a high-powered Wi-Fi router from D-Link, a Taiwan-based company. D-Link DIR-2640 Quagga 1.11B02 and previous versions are vulnerable to a trust management issue, which stems from the use of default hard-coded credentials for the service, and can be exploited by remote attackers...

D-Link DIR-2640 Path Traversal Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-2640, which can be exploited by remote attackers to submit a special request that can be used in an application context to read the contents of system files...

PT-2025-8055

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue has been resolved in the Linux kernel. The problem occurs when ref tracker dir init is called, and the struct ref tracker dir is marked as dead. To detect this...

CVE-2021-20134

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file on the router's filesystem as the log file used by either Quagga service zebra or ripd. Subsequen...

CVE-2021-20133

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, allowing them to read all or some of the contents of tho...

CVE-2021-20134

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set an arbitrary file on the router's filesystem as the log file used by either Quagga service zebra or ripd. Subsequen...

CVE-2021-20133

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, allowing them to read all or some of the contents of tho...

CVE-2021-20133

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, allowing them to read all or some of the contents of tho...