Lucene search
+L

10280 matches found

Positive Technologies
Positive Technologies
•added 2024/08/01 12:00 a.m.•17 views

PT-2024-38288 · D Link · D-Link Dir-600

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600 versions up to 2.18 Description: A critical issue affects the function soapcgi main of the file /soap.cgi. The manipulation of the argument service leads to os command injection. The attack may be initiated remotely. This issue...

9.8CVSS6.8AI score0.0574EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
•added 2024/07/31 12:00 a.m.•22 views

D-Link DIR-2150 Router Code Execution

The vulnerability of the application software interface of D-Link DIR-2150 routers exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8AI score0.01966EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/07/31 12:00 a.m.•22 views

D-Link DIR-3040 DoS

The vulnerability of the prog.cgi file in D-Link DIR-3040 wireless router software relates to the lack of proper memory management when processing HTTP cookie values. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

4.3CVSS5.5AI score0.0046EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2024/07/31 12:00 a.m.•31 views

DLink DIR Information Disclosure (PT-2011-30)

The version of DLink DIR installed on the remote host is affected by information disclosure Vulnerability as referenced in the PT-2011-30 advisory. The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vector...

6.8CVSS5.8AI score0.03064EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/07/30 8:15 p.m.•21 views

CVE-2024-41610

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS5.9AI score0.0085EPSS
SaveExploits0References2
NVD
NVD
•added 2024/07/30 8:15 p.m.•37 views

CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS0.00776EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/07/30 12:00 a.m.•23 views

D-Link DIR-860L security vulnerabilities

The D-Link DIR-860L is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-860L REVA FIRMWARE PATCH version 1.10.B04, which originates from the Telnet service containing hardcoded credentials, which can be exploited by an attacker to remotely login to the...

9.8CVSS7.3AI score0.00776EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•9 views

CVE-2024-41610: Use of Hard-coded Credentials

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS5.9AI score0.0085EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/30 12:00 a.m.•26 views

CVE-2024-41610

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

7.1AI score0.0085EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/30 12:00 a.m.•17 views

PT-2024-29461

Name of the Vulnerable Software and Affected Versions D-Link DIR-820LW REVB FIRMWARE versions prior to 2.03.B01 TC Description The issue concerns hardcoded credentials in the Telnet service, allowing attackers to log in remotely and execute arbitrary commands. Recommendations For versions prior t...

9.8CVSS7.8AI score0.0085EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/07/30 12:00 a.m.•21 views

D-Link DIR-820LW security vulnerabilities

The D-Link DIR-820LW is a dual-band wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-820LW REVB FIRMWARE PATCH version 2.03.B01TC, which originates from the inclusion of hardcoded credentials in the Telnet service, allowing an attacker to remotely log...

9.8CVSS7.3AI score0.0085EPSS
SaveExploits0References2
CVE
CVE
•added 2024/07/30 12:00 a.m.•85 views

CVE-2024-41611

The D-Link DIR-860L wireless router is vulnerable to a security flaw in the REVA FIRMWARE versions 1.10 through 1.10.B04 . The Telnet service contains hardcoded credentials , which allow an attacker to perform a remote login and execute arbitrary commands . To mitigate this risk, it is recommende...

9.8CVSS7.1AI score0.00776EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/30 12:00 a.m.•21 views

PT-2024-29462 · D Link · Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L REVA FIRMWARE versions 1.10 through 1.10.B04 Description: The issue concerns hardcoded credentials in the Telnet service, allowing remote login and execution of arbitrary commands. Recommendations: For versions 1.10 through...

9.8CVSS9.7AI score0.00776EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/07/30 12:00 a.m.•61 views

CVE-2024-41611

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

0.00776EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•9 views

CVE-2024-41611: Use of Hard-coded Credentials

In D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded credentials, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS8.2AI score0.00776EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/29 12:00 a.m.•22 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to perform bounds checking on all members of ocfs2direntry in the ocfs2checkdirentry function, whi...

5.5CVSS6.3AI score0.00247EPSS
SaveExploits0References10
CNVD
CNVD
•added 2024/07/24 12:00 a.m.•24 views

D-Link DIR-823X Code Execution Vulnerability

The D-Link DIR-823X is a wireless router from China's AUO D-Link. A code execution vulnerability exists in the D-Link DIR-823X AX3000 that stems from a failure to properly filter special elements of the constructed snippet in the /goform/setntp.ntpzoneval parameter. An attacker can exploit this...

9.8CVSS7.7AI score0.02057EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/07/22 12:00 a.m.•21 views

PT-2024-28627 · Bert-Vits · Bert-Vits

Name of the Vulnerable Software and Affected Versions: Bert-VITS2 versions 2.3 and earlier Description: The issue is related to the data dir variable, where user input is concatenated with other folders and used to open a new file in the generate config function, leading to a limited file write...

6.5CVSS6.8AI score0.00501EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2024/07/19 12:00 a.m.•44 views

CVE-2024-39962

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...

0.02057EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/19 12:00 a.m.•12 views

CVE-2024-39962: Improper Control of Generation of Code

D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21D240126 was discovered to contain a remote code execution RCE vulnerability in the ntpzoneval parameter at /goform/setntp. This vulnerability is exploited via a crafted HTTP request...

9.8CVSS8.6AI score0.02057EPSS
SaveExploits1References1
Rows per page
Query Builder