10259 matches found
Buffer overflow
D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...
CVE-2021-43722
D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...
CVE-2021-43722
CVE-2021-43722 affects D-Link DIR-645 (firmware v1.03 A1). The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack without size limit, causing a stack-based buffer overflow. CVSS data from NVD/OpenVAS indicate a high/critical impact when exploited ...
CVE-2022-26670
D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...
CVE-2021-43722: Out-of-bounds Write
D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...
PT-2022-11894
Name of the Vulnerable Software and Affected Versions D-Link DIR-645 version 1.03 A1 Description The issue is related to a Buffer Overflow. The hnap main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size. Recommendations For...
PT-2022-2788
Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version affected versions not specified Description The issue exists due to inadequate filtering for special characters in the webpage input field, allowing an unauthenticated LAN attacker to perform a command injection attack...
CVE-2022-27772
spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only affects products and/or versions that...
CVE-2022-27772
CVE-2022-27772 : Spring Boot before v2.2.11.RELEASE is vulnerable to temporary directory hijacking via the method org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir. A local attacker could leverage this to escalate privileges or take over the application, as de...
D-Link Dir-820L Remote Command Execution Vulnerability
D-Link Dir-820L is a dual-band wireless router from China's Youxun D-Link.D-Link DIR-820L 1.05B03 has a security vulnerability, and no details of the vulnerability are available...
CVE-2022-26258
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...
CVE-2022-26258
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...
Command injection
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...
CVE-2022-26258
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2022-26258: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...
D-Link DIR-X1860 Web Interface Unauthorized Access
The vulnerability of the web interface of D-Link DIR-X1860 Wi-Fi routers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTTP request...
D-Link Dir-820L 操作系统命令注入漏洞
D-Link Dir-820L is a dual-band wireless router from China's Youxun D-Link.D-Link DIR-820L 1.05B03 has a security vulnerability, and no details of the vulnerability are available...
PT-2022-2561
Name of the Vulnerable Software and Affected Versions D-Link DIR-820L version 1.05B03 Description The issue is related to a remote command execution vulnerability. It can be exploited via HTTP POST to get set ccp, allowing a remote attacker to execute arbitrary commands through the Device Name...
