Lucene search
+L

10277 matches found

osv_cve
osv_cve
•added 2024/09/06 4:15 p.m.•21 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

7.5CVSS5.8AI score0.00628EPSS
SaveExploits1References2
Veracode
Veracode
•added 2024/09/06 5:19 a.m.•24 views

Arbitrary Command Execution

push-dir is vulnerable to Arbitrary Command Execution. The vulnerability is due to the lack of validation for arguments provided in the "opt.branch" variable before being passed to the "git" command, allowing an attacker to inject arbitrary commands...

9.8CVSS6.8AI score0.02836EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/09/06 12:00 a.m.•20 views

D-Link DIR-846W Router Code Execution

The vulnerability of the D-Link DIR-846W router’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially craft...

10CVSS6AI score0.01832EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/09/06 12:00 a.m.•20 views

D-Link DIR-846W Router Code Execution

The vulnerability of the D-Link DIR-846W router’s microprogramming software is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially craft...

10CVSS6.3AI score0.01971EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/09/06 12:00 a.m.•48 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

0.00628EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/09/06 12:00 a.m.•16 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

7.5AI score0.00628EPSS
SaveExploits1References2
CVE
CVE
•added 2024/09/06 12:00 a.m.•86 views

CVE-2024-44408

D-Link DIR-823G v1.0.2B05_20181207 is vulnerable to information disclosure: unauthorized downloads of configuration files that contain plaintext passwords. This remote (network) issue is documented across multiple sources (NVD/Red Hat/CNVD/CVE lists). No explicit patch/version is provided in the ...

7.5CVSS6.8AI score0.00628EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2024/09/06 12:00 a.m.•21 views

D-Link DIR-823G security vulnerabilities

D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B0520181207 version, which stems from an information disclosure vulnerability that allows unauthorized configuration file downloads, where the downloaded configuration fi...

7.5CVSS6.4AI score0.00628EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/06 12:00 a.m.•7 views

CVE-2024-44408: Missing Authorization

D-Link DIR-823G v1.0.2B0520181207 is vulnerable to Information Disclosure. The device allows unauthorized configuration file downloads, and the downloaded configuration files contain plaintext user passwords...

7.5CVSS7.2AI score0.00628EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•218 views

D-Link DIR-600 / DIR-300 Unauthenticated Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link DIR-600 / DIR-300 Unauthenticated Remote Command Execution', 'Description' = %q This module exploits an OS Command Injection vulnerability...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2024/08/31 12:00 a.m.•186 views

D-Link DIR 645 Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link DIR 645 Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in DIR 645 'OSVDB', '90733' ,...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2024/08/28 12:00 a.m.•16 views

D-Link DIR-846W Command Execution Vulnerability (CNVD-2025-18481)

D-Link DIR-846W is a dual-band Gigabit wireless router with second-generation 11AC technology and MU-MIMO technology, supporting dual-band concurrent transmission rates up to 1200Mbps for 200M and above broadband users. A command execution vulnerability exists in the D-Link DIR-846W. The...

9.8CVSS7.3AI score0.01832EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/08/28 12:00 a.m.•22 views

Unspecified Vulnerability in D-Link DIR-846W

The D-Link DIR-846W is a dual-band Gigabit router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-846W A1 FW100A43, which stems from contains a remote code execution vulnerability. No detailed vulnerability details are provided at this time...

9.8CVSS7.8AI score0.01971EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/08/28 12:00 a.m.•6 views

PT-2024-34077

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.61 Description: A possible deadlock in the Linux kernel has been resolved, specifically in the fs/ntfs3 module, related to a mutex lock with another subclass used in the ni lock dir function. This issue is...

5.5CVSS0.00219EPSS
SaveExploits0
CNVD
CNVD
•added 2024/08/28 12:00 a.m.•27 views

D-Link DIR-846W Command Execution Vulnerability

D-Link DIR-846W is a dual-band Gigabit wireless router with second-generation 11AC technology and MU-MIMO technology, supporting dual-band concurrent transmission rates up to 1200Mbps for 200M and above broadband users. The D-Link DIR-846W suffers from a command execution vulnerability that stems...

9.8CVSS7.4AI score0.02031EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2024/08/28 12:00 a.m.•17 views

VulnCheck KEV: CVE-2020-10215

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dnsqueryname parameter in a dnsquery.cgi POST request. TRENDnet TEW-632BRP 1.010B32 is also affected...

9CVSS6.2AI score0.05255EPSS
SaveIn wildExploits1References3
NVD
NVD
•added 2024/08/27 4:15 p.m.•31 views

CVE-2024-44342

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution RCE vulnerability via the wl0.0ssid parameter. This vulnerability is exploited via a crafted POST request...

9.8CVSS0.01971EPSS
SaveExploits0References3
NVD
NVD
•added 2024/08/27 4:15 p.m.•35 views

CVE-2024-41622

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution RCE vulnerability via the tomographypingaddress parameter in /HNAP1/ interface...

9.8CVSS0.02031EPSS
SaveExploits0References3
NVD
NVD
•added 2024/08/27 4:15 p.m.•37 views

CVE-2024-44340

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution RCE vulnerability via keys smartqosexpressdevices and smartqosnormaldevices in SetSmartQoSSettings...

8.8CVSS0.01794EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/08/27 4:15 p.m.•22 views

CVE-2024-44342

D-Link DIR-846W A1 FW100A43 was discovered to contain a remote command execution RCE vulnerability via the wl0.0ssid parameter. This vulnerability is exploited via a crafted POST request...

9.8CVSS6AI score0.01971EPSS
SaveExploits0References3
Rows per page
Query Builder