CVE-2021-20133: Improper Limitation of a Pathname to a Restricted Directory

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, allowing them to read all or some of the contents of tho...

PT-2021-13790

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions less than or equal to 1.11B02 Description: The issue allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, enabling them to read all or some of the contents of those...

PT-2021-13789

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions less than or equal to 1.11B02 Description: The issue allows a remote attacker to gain administrative access to the zebra or ripd services, which are running with root privileges on the router. This is due to the use o...

PT-2021-13791

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2640 versions less than or equal to 1.11B02 Description: The issue allows a remote, authenticated attacker to exploit an absolute path traversal vulnerability in Quagga Services. This enables the attacker to set an arbitrary file o...

PT-2021-27997

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions, including...

PT-2021-27995

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as chunk free object and gs font dir finalize. No information...

D-Link DIR-809 Sub Function Code Execution

The vulnerability of the FUN80034d60 /formStaticDHCP function of the D-Link DIR-809 wireless router is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system via the created POST request...

D-Link DIR-809 Function Code Execution

The vulnerability of the FUN8004776c function /formVirtualApp of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system via the created POST request...

D-Link DIR-809 Function Heap Buffer Overflow DoS

The vulnerability of the FUN8004776c function /formVirtualServ of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system through the created POST request...

D-Link DIR-809 Function Code Execution

The vulnerability of the FUN80040af8 /formWlanSetup function in the wireless router software from D-Link, the DIR-809, is related to stack buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system using the created POST request...

D-Link DIR-809 Function Heap Buffer Overflow DoS

The vulnerability of the FUN800462c4 /formAdvFirewall function in the wireless router software from D-Link, the DIR-809, is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system through the created POST request...

D-Link DIR-823G cgi-bin/upload_firmware.cgi DoS

The vulnerability of the cgi-bin/uploadfirmware.cgi component of the D–Link DIR-823G router’s microprogramming system is related to the lack of authentication. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link DIR-2640-US Privilege Escalation

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

PT-2021-6097

Name of the Vulnerable Software and Affected Versions D-Link DIR-882 versions prior to DIR 882 FW1.30B06 Hotfix 02 Description The issue is related to incorrect handling of the LocalIPAddress parameter, allowing remote attackers to execute arbitrary commands by sending specially crafted HNAP1 POS...

CVE-2021-24747: Improper Neutralization of Special Elements used in an SQL Command

The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fnmyajaxifieddataloaderajax" AJAX request as the $REQUEST'order'0'dir' parameter is not properly escaped leading to blind and error-based SQL injections...

PT-2021-6099

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 versions prior to the fixed version Description The issue is related to the implementation of the twsystem function in the D-Link DIR-878 wireless router's firmware, which fails to neutralize special elements used in operating...

PT-2021-6098

Name of the Vulnerable Software and Affected Versions D-Link DIR 882 version DIR 882 FW1.30B06 Hotfix 02 Description The issue is related to a command injection vulnerability in the twsystem function. This allows attackers to execute arbitrary commands via a crafted HNAP1 POST request to the / AP...

PT-2021-6096

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 versions 1.30B08 Hotfix 02 D-Link DIR-882 versions 1.30B06 Hotfix 02 Description The issue is related to a command injection vulnerability in the system function of D-Link devices. This vulnerability allows attackers to execute...

D-Link DIR-809 Function Use-After-Free

The vulnerability of the FUN80046eb4 /formSetPortTr function of the wireless router D-Link DIR-809 is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system using the created POST request...

Metasploit Wrap-Up

Word and Javascript are a rare duo. Thanks to thesunRider. you too can experience the wonder of this mystical duo. The sole new metasploit module this release adds a file format attack to generate a very special document. By utilizing Javascript embedded in a Word document to trigger a chain of...