CVE-2020-29322: Insufficiently Protected Credentials

The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

Fuzz 403ing endpoints for bypasses Follow on twitter! @intrudir This tool will check the endpoint with a couple of headers such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path. e.g. /%2e/test/test2...

PT-2021-19840

Name of the Vulnerable Software and Affected Versions @backstage/techdocs-common versions prior to 0.6.3 Description A malicious actor could read sensitive files from the environment where TechDocs documentation is built and published by setting a particular path for docs dir in mkdocs.yml. These...

VulnCheck KEV: CVE-2020-29557

D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution...

Backdoor.Win32.Tonerok.d Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/b297c565899ace88f40e5da833f41561.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Tonerok.d Vulnerability: Unauthenticated Remote Command Execution Description: The...

D-Link DIR-842 telnetd authentication anti-blast protection mechanism bypass vulnerability

D-Link DIR-842 is a home router manufactured by Taiwan Youxun Technology Co. The D-Link DIR-842 has a telnetd authentication anti-blast protection mechanism bypass vulnerability, which can be exploited by attackers to bypass the anti-violence cooling delay period via a time-based side channel...

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

Authentication flaw

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

CVE-2021-27342: Observable Discrepancy

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

PT-2021-17405

Name of the Vulnerable Software and Affected Versions D-Link Router model DIR-842 version 3.0.2 Description The issue concerns an authentication brute-force protection mechanism bypass in the telnetd service. This bypass allows a remote attacker to circumvent the anti-brute-force cool-down delay...

Exploit for Observable Discrepancy in Dlink Dir-842E_Firmware

D-Link-CVE-2021-27342-e...

Exploit for Observable Discrepancy in Dlink Dir-842E_Firmware

D-Link-CVE-2021-27342-e...

CVE-2021-32615

Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...

Binary Vulnerability in D-Link DIR-809

The D-Link DIR-809 is a wireless router that uses RTOS. A binary vulnerability exists in the D-Link DIR-809, which can be exploited by attackers to cause a denial of service...

PT-2021-19808

Name of the Vulnerable Software and Affected Versions Piwigo version 11.4.0 Description The issue allows for SQL Injection through the order0dir parameter in the admin/user list backend.php endpoint. Recommendations For Piwigo version 11.4.0, as a temporary workaround, consider restricting access...

CVE-2021-32615: Improper Neutralization of Special Elements used in an SQL Command

Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...

Denial of Service Vulnerability in D-Link DIR-809 (CNVD-2021-37559)

The D-Link DIR-809 is a wireless router that uses RTOS. A denial of service vulnerability exists in the D-Link DIR-809. An attacker can exploit this vulnerability to cause a denial of service...

Denial of Service Vulnerability in D-Link DIR-809 (CNVD-2021-37560)

The D-Link DIR-809 is a wireless router that uses RTOS. A denial of service vulnerability exists in the D-Link DIR-809. An attacker can exploit the vulnerability to cause a denial of service...

Denial of Service Vulnerability in D-Link DIR-809 (CNVD-2021-37558)

The D-Link DIR-809 is a wireless router that uses RTOS. A denial of service vulnerability exists in the D-Link DIR-809. An attacker can exploit this vulnerability to cause a denial of service...