CVE-2022-40720

The CVE-2022-40720 issue affects D-Link DIR-2150 routers (firmware 4.0.1) via the Dreambox xupnpd plugin, which listens on TCP port 4044. The root cause is improper validation of a user-supplied string before it is used in a system call, enabling network-adjacent attackers to execute arbitrary co...

fontconfig bug fix update

An update is available for fontconfig. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fontconfig packages contain the font configuration and customization...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

CVE-2022-46959: Improper Limitation of a Pathname to a Restricted Directory

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

PT-2023-36383

Уязвимость реализации протокола HNAP1 Home Network Administration Protocol микропрограммного обеспечения беспроводных маршрутизаторов D-Link DIR-882 A1 связана с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы. Эксплуатация уязвимости может...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

PT-2023-8705

Name of the Vulnerable Software and Affected Versions D-Link Dir 816 version DIR-816 A2 v1.10CNB04 Description The issue is related to a Command Injection vulnerability that allows attackers to run arbitrary commands via the urlAdd parameter. This can potentially enable a remote attacker to eleva...

PT-2023-15119 · Sonic · Sonic

Name of the Vulnerable Software and Affected Versions: Sonic version 1.0.4 Description: The issue allows attackers to execute a directory traversal in the component /admin/backups/work-dir. This enables attackers to access files or directories outside the intended directory structure...

CVE-2022-46959

An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal...

PT-2023-8706

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 A1 version DIR882A1 FW130B06 Description The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-882 A1 wireless router's firmware, which fails to neutralize special elements used in operating system...

PT-2023-1489

Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description The issue is caused by a stack overflow via the webpage parameter at "/goform/formWPS". This can allow a remote attacker to execute arbitrary code. Recommendations For D-Link N300...

PT-2023-3370

Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description A stack overflow issue was discovered in the D-Link N300 WI-FI Router DIR-605L, related to the webpage parameter at "/goform/formSetWanDhcpplus". This issue is associated with a...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

Command injection

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

CVE-2022-46476

CVE-2022-46476 affects the D-Link DIR-859 A1 firmware (1.05). The issue is a command-injection vulnerability in the router’s soapcgi_main function, exploitable via the service= parameter due to inadequate input sanitization in the management interface. This could enable a remote attacker to execu...

CVE-2022-46476: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function...

D-Link DIR-859: Operating System Command Injection Vulnerability

D-Link DIR-859 is a wireless router from D-Link China.A security vulnerability exists in the D-Link DIR-859A1 1.05, which was discovered to contain a command injection vulnerability via the service= variable in the soapcgimain function. No detailed vulnerability details are currently available...