10290 matches found
PT-2023-2983 · D Link · D-Link Dir-846
Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 1.00A52 Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-846 router's firmware, specifically concerning the handling of the tomography ping address parameter. This can be...
D-Link DIR-868L Router Command Execution
The vulnerability of the SetClientInfoDemo.php script in the D-Link DIR-868L router microprogramming software exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute...
D-Link DIR-605L Stack Buffer Overflow Vulnerability
The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L version 1.17B01 BETA suffers from a stack buffer overflow vulnerability due to incorrect boundary checking in /goform/formTcpipSetup. An attacker could exploit this vulnerability to cause a buffer overflow and...
D-Link DIR-2640-US Bypass Security Restrictions
The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming devices is related to deficiencies in the authentication process when processing requests containing XML elements. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions...
HNAP1 Protocol Code Execution
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the PrefixLen parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...
D-Link DIR-822 Router SetWiFiVerifyAlpha.php Data Compromise
The vulnerability of the SetWiFiVerifyAlpha.php script of the D-Link DIR-822 router’s software lies in insufficient validation of arguments passed in the command when processing the WPSPIN parameter. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability,...
D-Link DIR-822 Router Arbitrary Command Execution
The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router microprogramming software is related to insufficient checking of regular expressions during the processing of the uplink parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
D-Link DIR-819 Router Resource Leak DoS
The vulnerability of D-Link DIR-819 router’s microprogramming software is related to improper cleaning or freeing of resources. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted request from the...
D-Link DIR-2640-US Bypass Security Restrictions
The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming software is related to deficiencies in the authentication process when processing the LoginPassword parameter. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by sending ...
D-Link Wi-Fi Router HNAP Protocol Code Execution
The vulnerability of the HNAP protocol implementation in D-Link Wi-Fi router software models such as DIR-867-US, DIR-878, and DIR-882-US lies in the ability to bypass authentication by using an alternative path or channel when processing HTTP requests that include the string “?GetCAPTCHAsetting”...
D-Link DIR-2640-US Code Execution
The vulnerability in the prog.cgi web interface for managing D-Link DIR-2640-US router microprogramming software relates to the escape of operations beyond the buffer in memory when checking the length of data entered by the user. Exploiting this vulnerability allows a remote attacker to execute...
PT-2023-2929 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 13.6.0 Description: The issue is related to a lack of validation of XML object sequences in the user list backend.php script of the Piwigo content management system. This can be exploited by a remote attacker to condu...
CVE-2023-27233: Improper Neutralization of Special Elements used in an SQL Command
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order0dir parameter at userlistbackend.php...
CVE-2023-27233
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order0dir parameter at userlistbackend.php...
CVE-2023-29961
D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,...
CVE-2023-29961
D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,...
Stack overflow
D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,...
D-Link DIR-605L buffer error vulnerability
The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L version 1.17B01 BETA suffers from a stack buffer overflow vulnerability due to incorrect boundary checking in /goform/formTcpipSetup. An attacker could exploit this vulnerability to cause a buffer overflow and...
