D-Link DIR-816L (Wireless Router) - Cross-Site Request Forgery (CVE-2015-5999)

1 User login to DIR-816L wireless router 2 User visits the attacker's malicious web page attacker.html 3 attacker.html exploits CSRF vulnerability and changes the admin account password PoC video link: http://youtu.be/UBdR2sUc8Wg Exploit code attacker.html:...

Stack Buffer Overflow Vulnerability in Multiple D-Link Products

The D-Link DIR-850L is a wireless router from AUO D-Link. A stack buffer overflow vulnerability exists in the D-Link DIR-850L using firmware versions 1.14B07 and 2.07.B05. An attacker can exploit this vulnerability to execute arbitrary code in the context of the affected device, resulting in a...

D-Link DIR-850L web admin interface contains a stack-based buffer overflow vulnerability

Overview D-Link DIR-850L, firmware versions 1.14B07, 2.07.B05, and possibly others, contains a stack-based buffer overflow vulnerability in the web administration interface HNAP service. Other models may also be affected. Description CWE-121: Stack-based Buffer Overflow - CVE-2017-3193D-Link...

CVE-2017-5228

All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the...

D-Link DIR Routers HNAP Buffer Overflow Vulnerability (SAP10066)

Several D-Link DIR Routers are prone to a buffer overflow vulnerability in HNAP. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

D-link DIR Routers - Unauthenticated HNAP Login Stack Buffer Overflow

No description provided by source...

D-Link DIR-600M - Cross-Site Request Forgery

Exploit Title:D-link wireless router DIR-600M – Cross-Site Request Forgery CSRF vulnerability Google Dork:N/A Date: 07/02/2017 Exploit Author:Ajay S. Kulal www.twitter.com/ajaykulal Vendor Homepage:dlink.com Software Link:N/A Version:Hardware version: C1 Firmware version: 3.03 Tested on:All...

CVE-2016-6517

Directory traversal vulnerability in Liferay 5.1.0 allows remote attackers to have unspecified impact via a %2E%2E encoded dot dot in the minifierBundleDir parameter to barebone.jsp...

D-Link DIR-615 Open Redirection / Cross Site Scripting Vulnerabilities

Exploit for hardware platform in category web applications Title: D-Link DIR-615 Multiple Vulnerabilities Date: 10-01-2017 Hardware Version: E3 Firmware Version: 5.10 Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Original...

D-Link DIR-615 Open Redirection / Cross Site Scripting

Title: D-Link DIR-615 Multiple Vulnerabilities Date: 10-01-2017 Hardware Version: E3 Firmware Version: 5.10 Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Original write-up:https://osandamalith.com/2017/01/04/d-link-dir-615-open-redirection-and-xss/ Overview...

D-Link DIR-615 - Multiple Vulnerabilities

Title: D-Link DIR-615 Multiple Vulnerabilities Date: 10-01-2017 Hardware Version: E3 Firmware Version: 5.10 Tested on: Windows 8 64-bit Exploit Author: Osanda Malith Jayathissa @OsandaMalith Original write-up:https://osandamalith.com/2017/01/04/d-link-dir-615-open-redirection-and-xss/ Overview...

CVE-2016-10039

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles...

CVE-2016-10039

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles...

CVE-2016-10038

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove...

CVE-2016-10037

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id aka dir parameter, related to browser/directory/getlist...

CVE-2016-10038: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/remove...

CVE-2016-10039: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted dir parameter, related to browser/directory/getfiles...

PT-2016-4564

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.5.2-pl Description The issue allows remote attackers to perform local file inclusion, traversal, and manipulation via a crafted dir parameter in the /connectors/index.php file. This is related to the...

PT-2016-4563

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.5.2-pl Description The issue allows remote attackers to perform local file inclusion, traversal, and manipulation via a crafted dir parameter in the /connectors/index.php file. This is related to browser,...

Dlink DIR Routers Unauthenticated HNAP Login Stack Buffer Overflow

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' Payload working status: MIPS: - all valid payloads working the ones that we are able to send without null bytes ARM: - inline rev/bind shell works...