PT-2021-27995

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as chunk free object and gs font dir finalize. No information...

D-Link DIR-809 Function Heap Buffer Overflow DoS

The vulnerability of the FUN8004776c function /formVirtualServ of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system through the created POST request...

D-Link DIR-809 Sub Function Code Execution

The vulnerability of the FUN80034d60 /formStaticDHCP function of the D-Link DIR-809 wireless router is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system via the created POST request...

D-Link DIR-809 Function Code Execution

The vulnerability of the FUN80040af8 /formWlanSetup function in the wireless router software from D-Link, the DIR-809, is related to stack buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system using the created POST request...

D-Link DIR-809 Function Heap Buffer Overflow DoS

The vulnerability of the FUN800462c4 /formAdvFirewall function in the wireless router software from D-Link, the DIR-809, is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system through the created POST request...

D-Link DIR-809 Function Code Execution

The vulnerability of the FUN8004776c function /formVirtualApp of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system via the created POST request...

D-Link DIR-823G cgi-bin/upload_firmware.cgi DoS

The vulnerability of the cgi-bin/uploadfirmware.cgi component of the D–Link DIR-823G router’s microprogramming system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link DIR-2640-US Privilege Escalation

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

PT-2021-6097

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 versions prior to DIR 882 FW1.30B06 Hotfix 02 Description The issue is related to incorrect handling of the LocalIPAddress parameter, allowing remote attackers to execute arbitrary commands by sending specially crafted HNAP1 POS...

CVE-2021-24747: Improper Neutralization of Special Elements used in an SQL Command

The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fnmyajaxifieddataloaderajax" AJAX request as the $REQUEST'order'0'dir' parameter is not properly escaped leading to blind and error-based SQL injections...

PT-2021-6099

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 versions prior to the fixed version Description The issue is related to the implementation of the twsystem function in the D-Link DIR-878 wireless router's firmware, which fails to neutralize special elements used in operating...

PT-2021-6098

Name of the Vulnerable Software and Affected Versions D-Link DIR 882 version DIR 882 FW1.30B06 Hotfix 02 Description The issue is related to a command injection vulnerability in the twsystem function. This allows attackers to execute arbitrary commands via a crafted HNAP1 POST request to the / AP...

PT-2021-6096

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 versions 1.30B08 Hotfix 02 D-Link DIR-882 versions 1.30B06 Hotfix 02 Description The issue is related to a command injection vulnerability in the system function of D-Link devices. This vulnerability allows attackers to execute...

D-Link DIR-809 Function Use-After-Free

The vulnerability of the FUN80046eb4 /formSetPortTr function of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system using the created POST request...

Metasploit Wrap-Up

Word and Javascript are a rare duo. Thanks to thesunRider. you too can experience the wonder of this mystical duo. The sole new metasploit module this release adds a file format attack to generate a very special document. By utilizing Javascript embedded in a Word document to trigger a chain of...

PT-2021-6793

Name of the Vulnerable Software and Affected Versions D-Link DIR-859 version 1.05 Description The issue is related to a stack-based buffer overflow in the genacgi main function, which can cause a Denial of Service DoS when a crafted payload is sent to the /gena.cgi API endpoint. This allows an...

D-Link DIR-809 formStaticDHCP Buffer Overflow Vulnerability

D-Link DIR-809 is a dual-band router from D-Link, China. buffer overflow vulnerability exists in the fun80034d60 function in the D-Link DIR-809 formStaticDHCP, which can be exploited by attackers to submit special requests that can crash applications or execute arbitrary code...

D-Link DIR-809 fromLogin Buffer Overflow Vulnerability (CNVD-2021-94720)

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link, China, which stems from the failure of the sub8003183C function in the product/fromLogin link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in a denial of...

D-Link DIR-809 formVirtualServ Buffer Overflow Vulnerability (CNVD-2021-94719)

The D-Link DIR-809 is a dual-band router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-809, which stems from the FUN8004776c function in the product/formVirtualServ link failing to effectively determine data boundaries. An attacker could cause a denial of servi...

D-Link DIR-809 formAdvFirewall buffer overflow vulnerability

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China.The vulnerability stems from the failure of the FUN800462c4 function in the product/formAdvFirewall link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting...