CVE-2019-15529: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Username field to Login...

PT-2019-3258

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description The issue is related to the lack of data sanitization on the management level of the D-Link DIR-823G router's firmware. This can be exploited by a remote attacker to elevate privileges and execute...

PT-2019-3736

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G versions V1.0.2B05 Description The issue is related to the lack of input validation in the SetStaticRouteSettings field, allowing for command injection via shell metacharacters in the Interface field. This can be exploited by a...

PT-2019-3735

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description The issue is related to the lack of input validation in the Username field, allowing for command injection via shell metacharacters. This can be exploited by a remote attacker to impact the...

PT-2019-14247

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This issue occurs due to shell metacharacters in the MaxIdTime field when using the...

PT-2019-14246

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G version V1.0.2B05 Description A command injection issue was discovered in the HNAP1 protocol, which is exploitable with authentication. This occurs via shell metacharacters in the Type field to SetWanSettings. Recommendations F...

CVE-2019-15528: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Interface field to SetStaticRouteSettings...

CVE-2019-15526: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings, a related issue to CVE-2019-13482...

CVE-2019-15530: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the LoginPassword field to Login...

CVE-2019-15527: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-823G devices with firmware V1.0.2B05. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the MaxIdTime field to SetWanSettings...

D-Link DIR-600M - Authentication Bypass (Metasploit)

D-Link DIR-600M - Authentication Bypass Metasploit This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CVE-2019-13101 D-Link DIR-600M Incorrect Access Control', 'Description' = %q This module...

D-Link DIR-600M - Authentication Bypass (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CVE-2019-13101 D-Link DIR-600M Incorrect Access Control', 'Description' = %q This module attempts to find D-Link router DIR-600M which is...

Fedora 30 : 6:kdelibs / kde-settings (2019-a746ac9c89)

This update fixes CVE-2019-14744 kconfig arbitrary shell code execution in the compatibility library kdelibs 4 used by legacy applications not yet ported to KDE Frameworks 5. The included kde-settings update removes obsolete settings that conflict with the security fix and are no longer needed se...

PT-2019-5830

Name of the Vulnerable Software and Affected Versions D-Link DIR-846 version 100A35 Description The issue is related to insufficient argument checking in the SetMasterWLanSettings function of the D-Link DIR-846 firmware, allowing remote attackers to execute arbitrary OS commands as root. This can...

CVE-2019-13101

An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page...

CVE-2019-13101

An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page...

CVE-2019-13101

An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page...

CVE-2019-13101

An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page...

CVE-2019-13101

D-Link DIR-600M (firmware 3.02–3.06) models expose wan.htm without authentication, allowing disclosure of WAN information and potential modification of page data. Exploitation details exist (Metasploit/Exploit-DB module) targeting authentication bypass, with documented testing on firmware 3.01–3....

CVE-2019-13101: Missing Authentication for Critical Function

An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page...