10239 matches found
CVE-2018-11013
Affected product: D-Link DIR-816 A2 routers running firmware 1.10B05. The vulnerability is a stack-based buffer overflow in the GoAhead websRedirect function that can be triggered by a long HTTP Host header, allowing unauthenticated remote code execution. Multiple sources (CNVD and NVD entries) c...
CVE-2018-11013
Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 CN routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code via a request with a long HTTP Host header...
PT-2018-1332 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 firmware version 1.10B05 Description: The issue is related to a stack-based buffer overflow in the websRedirect function, which can be exploited by sending a specially crafted HTTP request with a long Host header. This allow...
CVE-2018-11013: Out-of-bounds Write
Stack-based buffer overflow in the websRedirect function in GoAhead on D-Link DIR-816 A2 CN routers with firmware version 1.10B05 allows unauthenticated remote attackers to execute arbitrary code via a request with a long HTTP Host header...
CVE-2018-10996
The webloginlog function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service buffer overflow via a session.cgi?ACTION=logout request involving a long REMOTEADDR environment variable...
CVE-2018-10996
The CVE-2018-10996 issue affects D-Link DIR-629-B1 routers, specifically the weblogin_log function in /htdocs/cgibin. A long REMOTE_ADDR in a session.cgi?ACTION=logout request can trigger a buffer overflow, allowing arbitrary code execution or a denial of service. No remediation details are provi...
CVE-2018-10996: Improper Restriction of Operations within the Bounds of a Memory Buffer
The webloginlog function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or cause a denial of service buffer overflow via a session.cgi?ACTION=logout request involving a long REMOTEADDR environment variable...
PT-2018-1333
Name of the Vulnerable Software and Affected Versions D-Link DIR-629-B1 affected versions not specified Description The issue is caused by a buffer overflow in the weblogin log function. This can be exploited by a remote attacker using a specially crafted request to the session.cgi?ACTION=logout...
CVE-2018-10957
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
Cross site request forgery (csrf)
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2018-10957
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2018-10957
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
CVE-2018-10957
CVE-2018-10957 affects the D-Link DIR-868L router. The vulnerability is a CSRF in the affected components hedwig.cgi and pigwidgeon.cgi that can allow a remote attacker to perform actions such as changing the Admin password. Impact is described across multiple sources; no official patch/version i...
CVE-2018-10957: Cross-Site Request Forgery (CSRF)
CSRF exists on D-Link DIR-868L devices, leading to for example a change to the Admin password. hedwig.cgi and pigwidgeon.cgi are two of the affected components...
D-Link DIR-868L 1.12 Cross Site Request Forgery Vulnerability
Exploit for hardware platform in category web applications ======================================================================= title: Cross Site Request Forgery product: DIR-868L vulnerable version: 1.12 fixed version: 1.20B01 impact: Medium homepage: http://www.dlink.com/ found: 2018-02-18 b...
Information Disclosure Vulnerability in D-Link DIR-601
D-Link DIR-601 is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-601 A1 version 1.02NA, which can be exploited to obtain information by intercepting the parameters passed to the user to change the password without the need for the current password and...
PT-2018-3918 · D Link · D-Link Di-604 +1
Name of the Vulnerable Software and Affected Versions: D-Link DIR-550A versions through v2.10KR D-Link DIR-604M versions through v2.10KR Description: The issue allows a malicious user to forge an HTTP request and inject operating system commands that can be executed on the device with higher...
PT-2018-3909 · D Link · D-Link Dir-868L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L affected versions not specified Description: The issue is related to a CSRF Cross-Site Request Forgery attack, which can be exploited by a remote attacker. This could allow the attacker to perform actions such as changing the...
D-Link DIR-868L 1.12 Cross Site Request Forgery
Confidentiality class: Internal & Partner ======================================================================= title: Cross Site Request Forgery product: DIR-868L vulnerable version: 1.12 fixed version: 1.20B01 impact: Medium homepage: http://www.dlink.com/ found: 2018-02-18 by: S. Tripathy...