CVE-2018-20114

On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-6530...

CVE-2018-20114

CVE-2018-20114 affects D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03. It is tied to an OS command injection in the cgibin soap.cgi service, exploitable via the service parameter containing an ? substring, reflecting an incomplete fix for CVE-2018-6530. Connected documents corrobora...

PT-2019-1116

Name of the Vulnerable Software and Affected Versions: D-Link DIR-818LW Rev.A version 2.05.B03 D-Link DIR-860L Rev.B version 2.03.B03 Description: The issue allows for unauthenticated remote OS command execution in the soap.cgi service of the cgibin binary. This can be achieved via an "&&"...

CVE-2018-20114: Improper Neutralization of Special Elements used in an OS Command

On D-Link DIR-818LW Rev.A 2.05.B03 and DIR-860L Rev.B 2.03.B03 devices, unauthenticated remote OS command execution can occur in the soap.cgi service of the cgibin binary via an "&&" substring in the service parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-6530...

UCMS cross-site scripting vulnerability (CNVD-2019-00981)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in UCMS version 1.4.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'dir' parameter...

CVE-2018-20597

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadminfileedit action...

CVE-2018-20597

UCMS 1.4.7 is affected by a cross-site scripting (XSS) vulnerability caused by unsafely handling the dir parameter in the sadmin_fileedit action of index.php. The issue allows injection of arbitrary HTML/JavaScript in user-visible pages. No exploits or practical in-the-wild details are provided i...

CVE-2018-20597: Improper Neutralization of Input During Web Page Generation

UCMS 1.4.7 has XSS via the dir parameter in an index.php sadminfileedit action...

PT-2018-15461

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7 Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved by exploiting the dir parameter in the "index.php" sadmin fileedit action, allowing for malicious script...

D-Link DIR-140L and DIR-640L Information Disclosure Vulnerability

The D-Link DIR-140L and DIR-640L are both wireless router products from AUO D-Link. An information disclosure vulnerability exists in the dirary0.js file in the D-Link DIR-140L version 1.02 and DIR-640L version 1.01RU, which can be exploited by remote attackers to disclose admin credentials...

CVE-2018-18009

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-18009

The CVE-2018-18009 entry affects D-Link DIR-140L and DIR-640L routers (DIR-140L v1.02; DIR-640L v1.01RU). The vulnerability lies in dirary0.js, which allows remote unauthenticated attackers to disclose the admin password by reading the web interface file (example: http://victim_ip/dirary0.js). Im...

PT-2018-2106

Name of the Vulnerable Software and Affected Versions D-Link DIR-140L and DIR-640L devices Description The issue is related to the storage of credentials in an open manner, allowing remote unauthenticated attackers to discover admin credentials. This can enable a remote attacker to reveal protect...

CVE-2018-18009: Use of Hard-coded Credentials

dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover admin credentials...

CVE-2018-20305

D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a long password may lead to a stack-based buffer overflow and overwrite a return address...

CVE-2018-20305

CVE-2018-20305 affects D-Link DIR-816 A2 with firmware 1.10 B05. The /goform/form2userconfig.cgi handler accepts a long password in the newpass parameter, causing a stack-based buffer overflow that can overwrite a return address and allows arbitrary remote code execution without authentication. N...

CVE-2018-20305: Out-of-bounds Write

D-Link DIR-816 A2 1.10 B05 devices allow arbitrary remote code execution without authentication via the newpass parameter. In the /goform/form2userconfig.cgi handler function, a long password may lead to a stack-based buffer overflow and overwrite a return address...

PT-2018-2065 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: The issue allows for arbitrary remote code execution without authentication via the newpass parameter. In the "/goform/form2userconfig.cgi" handler function, a long password may lead to a...

CVE-2018-18248

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string...

CVE-2018-18248

Icinga Web 2 has XSS via the /icingaweb2/monitoring/list/services dir parameter, the /icingaweb2/user/list query string, the /icingaweb2/monitoring/timeline query string, or the /icingaweb2/setup query string...