CVE-2024-37630: Use of Hard-coded Credentials

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...

CVE-2024-37630

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root...

CVE-2024-37630

The D-Link DIR-605L wireless router, running firmware version v2.13B01 , contains a hardcoded password vulnerability within the /etc/passwd component. This flaw, caused by the use of fixed password encoding, allows a remote attacker to gain root privileges and full system access. While no officia...

CLSA-2024-1718202007 pam: Fix of CVE-2024-22365

CVE-2024-22365: pamnamespace: protectdir: use ODIRECTORY to prevent local DoS situations...

PT-2024-40794

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the involvement of mz zip mem read func, mz zip reader...

D-Link DIR-2640 Router Code Execution

The vulnerability of the prog.cgi file in D-Link DIR-2640 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context by sending specially crafted HNAP requests to TCP ports 80 an...

WordPress Photo Gallery by 10Web plugin <= 1.8.23 - Authenticated (Contributor+) Path Traversal via esc_dir Function vulnerability

Authenticated Contributor+ Path Traversal via escdir Function vulnerability discovered by Tobias Weißhaar kun19 in WordPress Plugin Photo Gallery by 10Web versions = 1.8.23...

Fedora: Security Advisory for rust-ssh-key-dir (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-36421

Name of the Vulnerable Software and Affected Versions The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress versions up to, and including, 1.8.23 Description The issue allows authenticated attackers to perform Path Traversal via the esc dir function, enabling them to cop...

PT-2024-37043

Name of the Vulnerable Software and Affected Versions Dulldusk's PHP File Manager version 1.7.8 Description The issue consists of a Cross-Site Scripting XSS vulnerability through the fm current dir parameter of the "index.php" endpoint. An attacker could send a specially crafted JavaScript payloa...

[SECURITY] Fedora 39 Update: rust-ssh-key-dir-0.1.4-8.fc39

sshd AuthorizedKeysCommand to read key files from /.ssh/authorizedkeys.d...

PT-2024-4653 · D Link · D-Link Dir-1950

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1950 versions up to v1.11B03 Description: The issue is related to the failure to validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow attackers to perform a man-in-the-middle...

PT-2024-9742 · D Link · D-Link Dir-860L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-860L version REVB FIRMWARE 2.04.B04 ic5b Description: A NULL pointer dereference in the D-Link DIR-860L firmware allows attackers to cause a Denial of Service DoS via a crafted HTTP request. The vulnerability is related to errors i...

D-Link DIR-2640 Buffer Overflow Vulnerability

The D-Link DIR-2640 is a high power Wi-Fi router from China's AUO D-Link. The D-Link DIR-2640 suffers from a buffer overflow vulnerability that originates from a program's failure to properly validate the length and size of input data, which can be exploited by an attacker to execute arbitrary co...

D-Link DIR-2150 Code Execution Vulnerability

The D-Link DIR-2150 is a wireless router from China-based AUO D-Link. The D-Link DIR-2150 suffers from a code execution vulnerability that stems from an application failing to properly filter special elements that construct code segments. An unauthenticated attacker could exploit the vulnerabilit...

D-Link DIR-3040 Memory Leak Vulnerability

The D-Link DIR-3040 is a router from China's AUO D-Link. It provides the function of connecting to the network. The D-Link DIR-3040 suffers from a memory disclosure vulnerability that originates from not freeing or failing to free dynamically allocated heap memory, which can be exploited by an...

Fedora: Security Advisory for rust-ssh-key-dir (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

(0Day) D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2640-US routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within prog.cgi, which handles HNAP requests made to the lighttpd webserve...

(0Day) D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API interface, which listens on TCP port 80 by default. The...

(0Day) D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability

This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of D-Link DIR-3040 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi program, which handles HNAP requests made t...