10353 matches found
Linux ext4_empty_dir Heap Buffer Overflow DoS
The vulnerability of the ext4emptydir function fs/ext4/namei.c in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...
PT-2019-14628
Name of the Vulnerable Software and Affected Versions D-Link DIR-601 B1 version 2.00NA Description The issue is related to the lack of an anti-CSRF token, making the device susceptible to CSRF attacks. A remote attacker could potentially exploit this, in conjunction with other vulnerabilities, to...
PT-2019-4534
Name of the Vulnerable Software and Affected Versions D-Link DIR-601 B1 version 2.00NA Description The issue is related to authentication bypass in the D-Link DIR-601 router. It does not perform authentication checks on the server side, instead relying on client-side validation, which can be...
CVE-2019-16327: Improper Authentication
D-Link DIR-601 B1 2.00NA devices are vulnerable to authentication bypass. They do not check for authentication at the server side and rely on client-side validation, which is bypassable. NOTE: this is an end-of-life product...
D-Link DIR-601 CVE-2019-16327 Authentication Bypass Vulnerability
Description D-Link DIR-601 is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass authentication mechanism and perform unauthorized actions. This may lead to further attacks. D-Link DIR-601 Router 2.00NA is vulnerable; other versions may also be affected...
D-Link DIR-859 Unauthenticated Remote Command Execution
D-Link DIR-859 Routers are vulnerable to OS command injection via the UPnP interface. The vulnerability exists in /gena.cgi function genacgimain in /htdocs/cgibin, which is accessible without credentials. Module Options msf use exploit/linux/upnp/dlink/dir859subscribeexec msf...
D-Link DIR-601 B1 CVE-2019-16326 Cross Site Request Forgery Vulnerability
Description D-Link DIR-601 B1 is prone to a cross-site request-forgery vulnerability. An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible. D-Link DIR-601 B1 2.00NA is vulnerable; other versions may...
D-Link DIR-859 Routers CVE-2019-20213 Information Disclosure Vulnerability
Description D-Link DIR-859 routers are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information and perform unauthorized actions. Versions prior to D-Link DIR-859 1.07b03beta are vulnerable. Technologies Affected D-Link DIR-859 1.05 D-Link...
CVE-2019-19742
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
CVE-2019-19742
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
Cross site scripting
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
CVE-2019-19742
CVE-2019-19742 affects D-Link DIR-615 routers, where the User Account Configuration page is vulnerable to blind XSS via the name field. Connected sources substantiate a lack of proper input validation on the web UI leading to client-side script execution; exploitation steps reported include inser...
CVE-2019-19742: Improper Neutralization of Input During Web Page Generation
On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...
D-Link DIR-615 Authorization Issues Vulnerability
D-Link DIR-615 is a small wireless router product from AUO D-Link. The D-Link DIR-615 is vulnerable to an authorization issue. An attacker can exploit this vulnerability by sniffing network traffic to obtain the IP address of the user and the router, or even obtain a public IP address and take ov...
PT-2019-15941
Name of the Vulnerable Software and Affected Versions D-Link DIR-615 affected versions not specified Description The issue concerns a blind XSS vulnerability in the User Account Configuration page, specifically via the name field. Recommendations At the moment, there is no information about a new...
D-Link DIR-615 Input Validation Error Vulnerability
The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-615 suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to create a root admin user...
CVE-2019-19743
On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...
Code injection
On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...
CVE-2019-19743
CVE-2019-19743 affects the D-Link DIR-615 wireless router. A normal user can escalate privileges to root (admin) via the web portal, enabling administrative actions. Public references describe a privilege-escalation path using the Maintenance/Admin UI and provide reproduction steps (e.g., changin...
