D-Link DIR-845L Code Execution Vulnerability

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A code execution vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which stems from the soapcgimain function failing to correctly filter the special elements of the constructor snippet in the cgibin binary...

DEBIAN-CVE-2021-47145

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON in linktofixupdir While doing error injection testing I got the following panic kernel BUG at fs/btrfs/tree-log.c:1862! invalid opcode: 0000 1 SMP NOPTI CPU: 1 PID: 7836 Comm: mount Not tainted 5.13.0-rc1+ 305...

UBUNTU-CVE-2021-47145

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not BUGON in linktofixupdir While doing error injection testing I got the following panic kernel BUG at fs/btrfs/tree-log.c:1862! invalid opcode: 0000 1 SMP NOPTI CPU: 1 PID: 7836 Comm: mount Not tainted 5.13.0-rc1+ 305...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

CVE-2024-29385

The D-Link DIR-845L router (version v1.01KRb03 and earlier) is vulnerable to unauthenticated remote code execution due to a flaw in the cgibin binary's soapcgi_main function. The root cause is a lack of proper filtering for special elements in constructor snippets, specifically failing to clean d...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary of the D-Link DIR-845L wireless router. The flaw stems from a failure to properly filter special characters and commands within the binary, which could allow an attacker to achieve arbitrary command execution . This affects firmware ve...

CVE-2024-29366: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

CVE-2024-29385: Improper Neutralization of Special Elements used in a Command

DIR-845L router = v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgimain function...

D-Link DIR-845L security vulnerabilities

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A code execution vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which stems from the soapcgimain function failing to correctly filter the special elements of the constructor snippet in the cgibin binary...

PT-2024-22874 · D Link · D-Link Dir-845L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-845L router version 1.01KRb03 and earlier Description: The issue is related to an Unauthenticated remote code execution vulnerability in the cgibin binary via the soapcgi main function. This allows for remote code execution without...

PT-2024-22867 · D Link · Dir-845L

Name of the Vulnerable Software and Affected Versions: DIR-845L router firmware version = 1.01KRb03 Description: A command injection issue exists in the cgibin binary. Recommendations: For DIR-845L router firmware version = 1.01KRb03, update to a version greater than 1.01KRb03 to resolve the issu...

Tenda AC15 security vulnerabilities

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a stack buffer overflow...

CVE-2024-29385

DIR-845L router = v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgimain function...

CVE-2024-29385

DIR-845L router = v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgimain function...

dir-shop.cz Cross Site Scripting vulnerability OBB-3880036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-2564

CVE-2024-2564 affects PandaXGO PandaX up to 20240310 . The vulnerability is in the function ExportUser (file /apps/system/api/user.go ); manipulating the filename parameter enables a path traversal (e.g., '../filedir'), potentially allowing access to files outside the intended directory. Exploita...

Tenda AC18 security vulnerabilities

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users, supporting 2.4GHz and 5GHz dual-band, with a maximum transmission rate of 1900Mbps. Tenda AC18 suffers from a stack buffer overflow vulnerability that...