CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

Authentication flaw

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-33259

The CVE-2021-33259 issue affects the D-Link DIR-868LW router (version 1.12b) where several web interfaces allow access without authentication. The root cause is a lack of authentication requirements for multiple web interfaces, enabling an attacker to view users’ DNS query history. Impact is expo...

PT-2021-4603

Name of the Vulnerable Software and Affected Versions D-Link DIR-868LW version 1.12b Description The issue is related to weaknesses in the authentication procedure of the D-Link DIR-868LW router's web interface. This allows a remote attacker to obtain users' DNS query history due to the lack of...

D-Link DIR-868L access control vulnerability

The D-Link DIR-868L is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-868LW, which originates from errors such as configuration during operation of a network system or product. An unauthorized attacker could exploit the vulnerability to obtai...

CVE-2021-33259: Missing Authentication for Critical Function

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

Telnet Service Unprotected Registration Data

The vulnerability of the Telnet service provided by the D-Link DIR-868L router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Telnet Service Unprotected Registration Data

The vulnerability of the Telnet service provided by the D-Link DIR-880L router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

[SECURITY] Fedora 34 Update: mediawiki-1.35.4-1.fc34

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...

CVE-2021-41753

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...

Authentication flaw

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...

CVE-2021-41753

The CVE-2021-41753 entry concerns D-Link DIR-X1560 (v1.04B04) and DIR-X6060 (v1.11B04) where a remote, unauthenticated attacker can cause a denial of service by sending specific spoofed SAE authentication frames to trigger disconnection of a wireless client. Connected sources corroborate the affe...

CVE-2021-41753

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...

Exploit for OS Command Injection in Dlink Dir-859_Firmware

IoT-vulhub 受 Vulhub 项目的启发，希望做一个 IoT 版的固件漏洞复现环境。 安装 在 Ubuntu 20.04 下安装 docker 和 docker-compose： sh 安装 pip $ curl -s https://bootstrap.pypa.io/get-pip.py | python3 安装最新版 docker $ curl -s https://get.docker.com/ | sh 启动 docker 服务 $ systemctl start docker 安装 docker-compose $ python3 -m pip install...

D-Link DIR-X6060 and D-Link DIR-X1560: Authorization issue vulnerabilities

The D-Link DIR-X6060 and D-Link DIR-X1560 are both routers from D-Link, a Taiwan-based company. The security vulnerabilities in the D-Link DIR-X6060 and D-Link DIR-X1560 could be exploited to disconnect wireless clients by sending specific spoofed SAE authentication frames...

PT-2021-23396

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1560 version 1.04B04 D-Link DIR-X6060 version 1.11B04 Description A denial-of-service attack in WPA2 and WPA3-SAE authentication methods allows a remote unauthenticated attacker to disconnect a wireless client via sending specific...

CVE-2021-41753: Authentication Bypass by Spoofing

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...

D-Link DIR-605L information leakage vulnerability

D-Link DIR-605L is the first cloud router launched by D-link with a transfer speed of 300Mpbs. The D-Link DIR-605L is vulnerable to information disclosure. An attacker can exploit the vulnerability by forging a post request to the /getcfg.php page to obtain a username and password...

D-Link DIR-615 information leakage vulnerability

The D-Link DIR-615 is a SOHO wireless router with a maximum transfer rate of 300 Mbps. An information disclosure vulnerability exists in the D-Link DIR-615. The vulnerability can be exploited to obtain user name and password by forging a post request to the /getcfg.php page...