CVE-2024-42305 ext4: check dot and dotdot of dx_root before making dir indexed

In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dxroot before making dir indexed Syzbot reports a issue as follows: ============================================ BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D...

CVE-2024-42305 ext4: check dot and dotdot of dx_root before making dir indexed

In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dxroot before making dir indexed Syzbot reports a issue as follows: ============================================ BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D...

D-Link DIR-845L Devices Multiple Vulnerabilities (May 2024)

D-Link DIR-845L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DIR-300 Router Telnet Full Control

The vulnerability of the D-Link DIR-300 router’s telnet service lies in the ability to use pre-determined credentials. Exploiting this vulnerability allows a remote attacker to gain full control over the device...

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

PT-2024-5373

Name of the Vulnerable Software and Affected Versions D-Link DIR-300 REVA FIRMWARE version 1.06B05 WW Description The issue is related to the Telnet service in the firmware of D-Link DIR-300 routers, where hardcoded credentials are present. This could allow a remote attacker to exploit the...

D-Link DIR-300 security vulnerabilities

The D-Link DIR-300 is a wireless router from China AUO D-Link. A security vulnerability exists in D-Link DIR-300 v1.06B05WWW, which originates from the Telnet service using hardcoded credentials...

CVE-2024-41616

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

CVE-2024-41616: Use of Hard-coded Credentials

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

CVE-2024-41616

CVE-2024-41616 affects D-Link DIR-300 REVA firmware v1.06B05_WW, where the Telnet service uses hardcoded credentials, enabling potential unauthenticated access if Telnet is exposed. The vulnerability is rooted in the Telnet implementation, with high impact on confidentiality, integrity, and avail...

D-Link DIR-600 OS Command Injection Vulnerability

The D-Link DIR-600 is a wireless router from China's AUO D-Link. An operating system command injection vulnerability exists in the D-Link DIR-600 version 2.18 and earlier, which stems from the fact that manipulation of service parameters can lead to os command injection. No details of the...

Unspecified Vulnerability in D-Link DIR-860L (CNVD-2024-35163)

The D-Link DIR-860L is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-860L REVA FIRMWARE PATCH version 1.10.B04, which originates from the Telnet service containing hardcoded credentials, which can be exploited by an attacker to remotely login to the...

CVE-2024-7357

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgimain of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The...

CVE-2024-7357

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgimain of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The...

CVE-2024-7357 D-Link DIR-600 soap.cgi soapcgi_main os command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgimain of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The...

CVE-2024-7357

CVE-2024-7357 affects D-Link DIR-600 firmware up to 2.18. The vulnerability is in the soap.cgi helper soapcgi_main function, where manipulation of the service argument leads to OS command injection. The attack can be remote and the exploit has been disclosed publicly. The product is end-of-life a...

CVE-2024-7357 D-Link DIR-600 soap.cgi soapcgi_main os command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgimain of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The...

CVE-2024-7357: Improper Neutralization of Special Elements used in an OS Command

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DIR-600 up to 2.18. It has been rated as critical. This issue affects the function soapcgimain of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. The...