CVE-2019-10042

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication...

CVE-2019-10041

The CVE-2019-10041 entry concerns the D-Link DIR-816 A2 router (version 1.11). The vulnerability arises because the device only validates a random token when authorizing a goform request; an attacker can obtain this token from dir_login.asp and use the API path /goform/form2userconfig.cgi to edit...

CVE-2019-10041

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication...

CVE-2019-10040

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication...

CVE-2019-10040

The CVE-2019-10040 issue affects the D-Link DIR-816 A2 (firmware 1.11). The vulnerability arises because the router only checks a random token when authorizing a goform request; an attacker can obtain this token from dir_login.asp and use the hidden API URL /goform/SystemCommand to execute a syst...

CVE-2019-10039

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication...

CVE-2019-10039

The CVE-2019-10039 affects the D-Link DIR-816 A2 router (version 1.11). The flaw is that token validation occurs only during goform authorization, enabling an attacker to obtain a random token from dir_login.asp and call /goform/setSysAdm to edit web or system accounts without authentication. Thi...

PT-2019-2027

Name of the Vulnerable Software and Affected Versions D-Link DIR-817LW versions A1-1.04 D-Link DIR-816L versions B1-2.06 D-Link DIR-816 versions B1-2.06 D-Link DIR-850L versions A1-1.09 D-Link DIR-868L versions A1-1.10 Description The mydlink feature in D-Link routers has a vulnerability related ...

CVE-2019-10042: Missing Authentication for Critical Function

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/LoadDefaultSettings to reset the router without authentication...

CVE-2019-10041: Missing Authentication for Critical Function

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication...

PT-2019-11394

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue concerns the authorization process for goform requests, where the router only checks a random token. This token can be obtained from dir login.asp, allowing an attacker to use the "API URL...

PT-2019-11392

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue concerns the authorization process of the router, where it only checks a random token when authorizing a goform request. This allows an attacker to obtain the token from dir login.asp and...

PT-2019-11393

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue allows an attacker to edit the system account without authentication by exploiting the fact that the router only checks the random token when authorizing a goform request. The token can be...

CVE-2019-10039: Missing Authentication for Critical Function

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/setSysAdm to edit the web or system account without authentication...

PT-2019-11391

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue allows an attacker to edit the web or system account without authentication by exploiting the fact that the router only checks the random token when authorizing a goform request. This toke...

CVE-2019-10040: Missing Authentication for Critical Function

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication...

D-Link DIR-823G Router Command Injection

The vulnerability of D-Link DIR-823G router microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands...

D-Link DIR-600M Router Authentication Bypass

The vulnerability of the D-Link DIR-600M C1 router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by directly...

SUSE SLED12 / SLES12 Security Update : audit (SUSE-SU-2019:0563-1)

This update for audit fixes the following issues : Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

PT-2019-19749

Name of the Vulnerable Software and Affected Versions OFCMS versions prior to 1.1.3 Description An issue was discovered related to directory traversal. This issue is connected to the getTemplates function in TemplateController.java and can be exploited through the...