CVE-2018-2654: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Company Dir / Org Chart Viewer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

D-Link DIR 615/645/815 service.cgi Remote Command Execution Vulnerability

D-Link DIR 615/645/815 is a wireless router product from AUO D-Link. A remote command execution vulnerability exists in D-Link DIR 615/645/815 routers with firmware version 1.03 and earlier. The vulnerability is caused by splicing data from HTTP POST requests in service.cgi, resulting in splicing...

PT-2018-2068

Name of the Vulnerable Software and Affected Versions: D-Link DIR-620 affected versions not specified Description: The issue is related to the use of predefined registration data in the firmware of the affected device. It allows a remote attacker to elevate privileges and execute arbitrary code...

PT-2018-19307

Уязвимость микропрограммного обеспечения маршрутизаторов D-Link DIR-620 связана с использованием предустановленных регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, повысить свои привилегии и выполнить произвольный код...

D-Link DIR-629 and DIR-823 Remote Stack Overflow Vulnerability

The D-Link DIR-629 and DIR-823 are both wireless router products from AUO D-Link. A remote stack overflow vulnerability exists in the D-Link DIR-629 and DIR-823. The vulnerability is caused by a buffer overflow in soap.cgi due to the use of the sprintf function to splice the HTTPSOAPACTION field ...

PT-2018-2072

Name of the Vulnerable Software and Affected Versions: D-Link DIR-620 affected versions not specified Description: The issue is related to insufficient access control in the firmware of D-Link DIR-620 routers. It allows a remote attacker to gain access to protected information. Recommendations: A...

PT-2018-19308

Уязвимость микропрограммного обеспечения маршрутизаторов D-Link DIR-620 связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить доступ к защищаемой информации...

PT-2018-4008 · D Link · Dir-860L +2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L versions DIR868LA1 FW112b04 and earlier D-Link DIR-865L versions DIR-865L REVA FIRMWARE PATCH 1.08.B01 and earlier D-Link DIR-860L versions DIR860LA1 FW110b04 and earlier Description: The issue allows remote attackers to read ...

D-Link soap.cgi Stack Buffer Overflow(CVE-2018-5318)

作者：Chu 1. 前言 老板前一段给买了几款路由把玩，研究了下 D-Link DIR 629、DIR 823 这两款板子。 发现在 soap.cgi 中存在几处栈溢出，均可以远程利用，并且其他型号的路由也有对 soap 这一部分代码的复用。 2. 逆向分析与漏洞挖掘 因为是想挖几个能远程利用的洞，首先去看了 HTTP 服务，也就是 /htdocs/cgibin。 D-Link HTTP 服务由cgibin提供，并通过软链接的文件名进入到不同的处理分支： 在各个 cgi 处理函数中，会通过 cgibinparserequest 来解析用户输入，其函数原型大致如下： 参数...

Ruby: The possibility that unintended file operation may be performed because some methods of `Dir` do not check NULL characters.

It seems that entries,new, and empty? do not check NULL characters in methods of Dir. log vagrant@localhost $ ls test vagrant@localhost $ irb irbmain:001:0 Dir.open"/home/vagrant\0xxx" do |d| irbmain:002:1 p d.read = "." irbmain:003:1 p d.read = ".." irbmain:004:1 p d.read irbmain:005:1 p d.read...

D-Link DIR-130 and DIR-330 Administrator Certificate Vulnerability

The D-Link DIR-130 and DIR-330 are both wireless router products from AUO D-Link. A vulnerability exists in the D-Link DIR-130 with firmware version 1.23 a and the DIR-330 with firmware version 1.12, which stems from the program failing to adequately protect the administrator certificate. A remot...

CVE-2017-3191

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages...

CVE-2017-3193

Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service...

CVE-2017-3192

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The toolsadmin.asp page discloses the administrator password in base64 encoding in the returned web page. A remote attacker with access to this page potentially through a...

Authentication flaw

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages...

CVE-2017-3192: Insufficiently Protected Credentials

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The toolsadmin.asp page discloses the administrator password in base64 encoding in the returned web page. A remote attacker with access to this page potentially through a...

CVE-2017-3193: Stack-based Buffer Overflow

Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP service...

CVE-2017-3191: Authentication Bypass by Capture-replay

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remote management login page can manipulate the POST request in such a manner as to access some administrator-only pages...

CVE-2017-3192

The CVE-2017-3192 issue affects D-Link DIR-130 (firmware 1.23) and DIR-330 (firmware 1.12). Public details confirm an authentication-related flaw where the tools_admin.asp page transmits the administrator password in base64, allowing a remote attacker with access to that page to potentially obtai...

CVE-2017-3191

CVE-2017-3191 affects D-Link DIR-130 (firmware 1.23) and DIR-330 (firmware 1.12); a POST manipulation on the remote management login page enables authentication bypass to access admin pages (e.g., tools_admin.asp) without credentials. Related CVE-2017-3192 covers credential exposure on tools_admi...