CVE-2019-19742

CVE-2019-19742 affects D-Link DIR-615 routers, where the User Account Configuration page is vulnerable to blind XSS via the name field. Connected sources substantiate a lack of proper input validation on the web UI leading to client-side script execution; exploitation steps reported include inser...

PT-2019-15941

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 affected versions not specified Description The issue concerns a blind XSS vulnerability in the User Account Configuration page, specifically via the name field. Recommendations At the moment, there is no information about a new...

CVE-2019-19742: Improper Neutralization of Input During Web Page Generation

On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field...

D-Link DIR-615 Authorization Issues Vulnerability

D-Link DIR-615 is a small wireless router product from AUO D-Link. The D-Link DIR-615 is vulnerable to an authorization issue. An attacker can exploit this vulnerability by sniffing network traffic to obtain the IP address of the user and the router, or even obtain a public IP address and take ov...

D-Link DIR-615 Input Validation Error Vulnerability

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-615 suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to create a root admin user...

CVE-2019-19743

On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...

Code injection

On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...

CVE-2019-19743

CVE-2019-19743 affects the D-Link DIR-615 wireless router. A normal user can escalate privileges to root (admin) via the web portal, enabling administrative actions. Public references describe a privilege-escalation path using the Maintenance/Admin UI and provide reproduction steps (e.g., changin...

CVE-2019-19743

On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...

D-Link DIR-615 Wireless Router  -  Persistent Cross-Site Scripting

D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting Exploit Title: D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting Date: 2019-12-13 Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link:...

D-Link DIR-615 - Privilege Escalation Vulnerability

Exploit for hardware platform in category web applications Exploit Title: D-Link DIR-615 - Privilege Escalation Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link: http://www.dlink.co.in/products/?pid=678 Hardware Version: T1 Firmwa...

CVE-2019-19743: Undefined Security Weakness

On D-Link DIR-615 devices, a normal user is able to create a rootadmin user from the D-Link portal...

D-Link DIR-615 - Privilege Escalation

Exploit Title: D-Link DIR-615 - Privilege Escalation Date: 2019-12-10 Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link: http://www.dlink.co.in/products/?pid=678 Hardware Version: T1 Firmware Version: 20.07 Tested on: Windows 10 an...

D-Link DIR-615 Wireless Router  -  Persistent Cross-Site Scripting

Exploit Title: D-Link DIR-615 Wireless Router - Persistent Cross-Site Scripting Date: 2019-12-13 Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link: http://www.dlink.co.in/products/?pid=678 Hardware Version: T1 Firmware Version:...

PT-2019-15942

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 devices affected versions not specified Description A security issue allows a normal user to create a root admin user from the D-Link portal, potentially leading to unauthorized access and control. Recommendations At the moment,...

D-Link DIR-615 - Privilege Escalation

D-Link DIR-615 - Privilege Escalation Exploit Title: D-Link DIR-615 - Privilege Escalation Date: 2019-12-10 Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link: http://www.dlink.co.in/products/?pid=678 Hardware Version: T1 Firmware...

D-Link DIR-615 Privilege Escalation

Exploit Title: D-Link DIR-615 - Privilege Escalation Date: 2019-12-10 Exploit Author: Sanyam Chawla Vendor Homepage: http://www.dlink.co.in Category: Hardware Wi-fi Router Hardware Link: http://www.dlink.co.in/products/?pid=678 Hardware Version: T1 Firmware Version: 20.07 Tested on: Windows 10 an...

The vulnerability of the DEVICE.TIME.php component in the wireless router software from D-Link, DIR-859 A3 and D-Link DIR-850L A, allows a hacker to execute arbitrary code.

The vulnerability of the DEVICE.TIME.php component in D-Link DIR-859 A3 and D-Link DIR-850L A wireless router microprogramming software is related to the lack of measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote...

The vulnerability of the Management Page component of D-Link DIR-816 A1 wireless routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Management Page component in the microprogramming software of D-Link DIR-816 A1 relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2019-4530

Name of the Vulnerable Software and Affected Versions D-Link DIR-818Lx versions not specified D-Link DIR-822 versions not specified D-Link DIR-823 versions not specified D-Link DIR-859 versions 1.05 through 1.06B01 Beta01 D-Link DIR-865L versions not specified D-Link DIR-868L versions not specifi...