(0Day) D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

(0Day) D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd...

(0Day) D-Link DIR-X3260 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

(0Day) D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

(0Day) D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within prog.cgi,...

PT-2023-5897

Name of the Vulnerable Software and Affected Versions D-Link DIR-1260 and DIR-2150 routers affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the CLI service, which listens on TCP por...

Git Eclipse JGit Code Execution

The vulnerability of the DirCacheCheckout, ResolveMerger, PullCommand, and PatchApplier classes in the Git version control system for the Java Eclipse JGit framework is related to improper handling of data that is sensitive to registry operations during repository cloning to the file system...

PT-2023-5728 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the CheckPasswdSettings function when handling the CurrentPassword parameter. This can be exploited by a remote attacker to cause a Denial of Servic...

PT-2023-5727 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetDeviceSettings function when handling the AdminPassword parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2023-5730 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetWanSettings function when handling the MacAddress parameter. This allows attackers to cause a Denial of Service DoS via a crafted input. The...

D-Link DIR-619L <= 2.02 Multiple Buffer Overflow Vulnerabilities (Sep 2023)

D-Link DIR-619L devices are prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

D-Link DIR-619L Router DoS

The vulnerability of the formSetWanPPTP function in the D-Link DIR-619L router’s microprogramming software is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

D-Link DIR-619L Router DoS

The vulnerability of the formSetWanPPPoE function in the D-Link DIR-619L router software is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

D-Link DIR-619L Router DoS

The vulnerability of the formSetWanL2TP function in the microprogramming software for D-Link DIR-619L routers is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

D-Link DIR-619L Router DoS

The vulnerability of the websGetVar function in the D-Link DIR-619L router’s microprogramming system is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

D-Link DIR-619L Router DoS

The vulnerability of the formSetWANWizard55 function in the microprogramming software of the D-Link DIR-619L router is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

D-Link DIR-3040 SetDynamicDNSSettings Code Execution

The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router operating system exists due to the lack of proper validation of the string provided by the user before it is copied into the fixed-length stack-based buffer. Exploiting this...

D-Link DIR-619L Router DoS

The vulnerability of the formSetWanNonLogin function in the D-Link DIR-619L router microprogramming system is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

D-Link DIR-619L Router DoS

The vulnerability of the formLanguageChange function in the D-Link DIR-619L router’s microprogramming system is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

PT-2023-5733 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version A1V1.0.2B05 Description: The issue is related to a buffer overflow in the SetParentsControlInfo function when handling the EndTime parameter. This allows attackers to cause a Denial of Service DoS via a crafted input...