CVE-2018-15875

Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request...

CVE-2018-15874

The connected CNVD entry describes a Cross-Site Scripting (XSS) vulnerability in D-Link DIR-615 routers using version 20.07, exploitable by injecting JavaScript into the Status → Active Client Table via the hostname field in DHCP requests. Affected component: the DHCP hostname handling on DIR-615...

CVE-2018-15875

The CVE concerns D-Link DIR-615 routers (version 20.07) with an XSS in the UPnP AddPortMapping SOAP request. The root cause is that the description field can be manipulated to inject JavaScript into the router’s admin UPnP page (Advanced→UPnP). Connected sources (CNVD-2018-16522, NVD entry) confi...

CVE-2018-15874

Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status - Active Client Table" page via the hostname field in a DHCP request...

PT-2018-13261

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 routers version 20.07 Description A cross-site scripting XSS issue allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an "AddPortMapping" UPnP SOAP request. Recommendations For...

CVE-2018-15874: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status - Active Client Table" page via the hostname field in a DHCP request...

CVE-2018-15875: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request...

PT-2018-13260

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 router version 20.07 Description A cross-site scripting XSS issue allows an attacker to inject JavaScript into the "Status - Active Client Table" page via the hostname field in a DHCP request. Recommendations For version 20.07,...

PT-2018-3802

Name of the Vulnerable Software and Affected Versions D-Link DIR-850L version 1.21WW Description An issue was discovered where a partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to...

Security fix for the ALT Linux 8 package mariadb version 10.1.35-alt1

Aug. 20, 2018 Alexey Shabalin 10.1.35-alt1 - 10.1.35 - Fixes for the following security vulnerabilities: + CVE-2018-3064 + CVE-2018-3063 + CVE-2018-3058 + CVE-2018-3066 - change mode of plugin dir in chroot ALT 33259...

PT-2018-3889 · D Link · D-Link Dir-601

Name of the Vulnerable Software and Affected Versions: D-Link DIR-601 version 2.02NA Description: An issue allows an attacker with low privilege "User" account access to intercept the response from a POST request and obtain "Admin" rights due to the admin password being displayed in XML. The...

OpenEMR SQL Injection Vulnerability (CNVD-2018-17195)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A SQL injection vulnerability exists in the...

PT-2018-12905

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description A SQL injection issue allows a remote authenticated attacker to execute arbitrary SQL commands. The issue is related to the temporary files dir variable in interface/super/edit globals.php...

Router vulnerability reproduction: from the principle to the first verification-vulnerability and early warning-the black bar safety net

The IOT vulnerability to reproduction and the traditional system vulnerabilities to reproduce the different point is that the physical network vulnerability depends on the hardware, almost every vulnerability all have to buy a new piece of hardware to reproduce, which is different from the...

D-Link DIR601 Credential Disclosure Vulnerability

The D-Link DIR-601 is a popular class 150M home product. A credential disclosure vulnerability exists in the D-Link DIR601. An attacker can exploit the vulnerability to retrieve sensitive information related to device configuration and management credentials...

D-Link DIR-300 Cross-Site Request Forgery Vulnerability

The D-Link DIR-300 is a wireless router device. A cross-site request forgery vulnerability exists in the D-Link DIR-300, which can be exploited by an attacker to perform an unauthorized operation, open remote access and save settings...

CVE-2016-6563

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822,...

Buffer overflow

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822,...

CVE-2016-6563 D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action

Processing malformed SOAP messages when performing the HNAP Login action causes a buffer overflow in the stack in some D-Link DIR routers. The vulnerable XML fields within the SOAP body are: Action, Username, LoginPassword, and Captcha. The following products are affected: DIR-823, DIR-822,...

CVE-2016-6563

Several D-Link DIR routers (including DIR-823, DIR-822, DIR-818L(W), DIR-895L, DIR-890L, DIR-885L, DIR-880L, DIR-868L, and DIR-850L) are vulnerable to a stack-based buffer overflow in the HNAP Login action . The flaw occurs when the device processes malformed SOAP messages containing arbitrarily ...