PT-2022-19543

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10CNB04 Description A stack overflow issue was discovered via the addhostfilter parameter in the "/goform/websHostFilter" API endpoint. Recommendations For D-Link DIR-816 A2 version 1.10CNB04, as a temporary...

CVE-2022-29321: Out-of-bounds Write

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan...

PT-2022-19541

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10CNB04 Description A stack overflow issue was discovered via the proto parameter in the "/goform/form2IPQoSTcAdd" API endpoint. Recommendations For D-Link DIR-816 A2 version 1.10CNB04, as a temporary workaround,...

CVE-2022-28915: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm...

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 version, which originates from a boundary error in the urladd parameter in the device/goform/websURLFilterAddDel when processing untrusted input. An...

CVE-2022-29324: Out-of-bounds Write

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd...

CVE-2022-29325: Out-of-bounds Write

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter...

D-Link DIR-846 Command Injection (CVE-2021-46314; CVE-2021-46315; CVE-2021-46319)

A command injection vulnerability exists in D-Link DIR-846. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

D-Link DIR-823-Pro Command Injection Vulnerability (CNVD-2022-38531)

The D-Link DIR-823-Pro is a router. version 1.0.2 of the D-Link DIR-823-Pro is vulnerable to command injection, which stems from the failure to properly filter the construct command special characters, commands, etc. in the function SetNTPserverSeting, which can be exploited by attackers to execu...

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

Command injection

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

CVE-2022-28573

CVE-2022-28573 concerns D-Link DIR-823-Pro firmware v1.0.2 where the vulnerable function is SetNTPserverSeting(). The issue allows an attacker to trigger a command injection via the system_time_timezone parameter, enabling arbitrary command execution. Multiple connected sources (NVD, Red Hat, CVE...

CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

UBUNTU-CVE-2022-29970

Sinatra before 2.2.0 does not validate that the expanded path matches publicdir when serving static files...

D-Link DIR-823-Pro 操作系统命令注入漏洞

The D-Link DIR-823-Pro is a router from China-based AUO D-Link. The D-Link DIR-823-Pro version 1.0.2 suffers from an operating system command injection vulnerability that originates from the inclusion of a command injection vulnerability in the function SetNTPserverSeting. An attacker could explo...

CVE-2022-28573: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the systemtimetimezone parameter...

D-Link DIR-820L Command Injection (CVE-2022-26258)

A command injection vulnerability exists in D-Link DIR-820L. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

D-Link DIR-825 G1 Access Control Error Vulnerability

The DIR-825 G1 is a router from D-Link in Taiwan, China. An access control error vulnerability exists in the firmware version of the D-Link DIR-825 G1, which stems from insufficient authentication. The vulnerability can be exploited to bypass authentication via the parameter "autoupgrade.asp" and...