Command injection

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbcsystem function at /htdocs/cgibin...

CVE-2023-39638

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbcsystem function at /htdocs/cgibin...

CVE-2023-39638

CVE-2023-39638 affects D-LINK DIR-859 A1 1.05 through A1 1.06B01 Beta01. A command injection exists in the lxmldbc_system function at the /htdocs/cgibin endpoint, linked to a failure to neutralize special elements, enabling remote arbitrary command execution. There is no public exploitation detai...

CVE-2023-39638: Improper Neutralization of Special Elements used in a Command

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbcsystem function at /htdocs/cgibin...

CVE-2023-39638

D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbcsystem function at /htdocs/cgibin...

D-Link DIR-859 Command Injection Vulnerability

The D-Link DIR-859 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 versions, which originates from the lxmldbcsystem function in /htdocs/cgibin that contains a command injection vulnerability...

D-Link DIR-868L Router Buffer Overflow

The vulnerability of the inetntoa function in D-Link DIR-868L router software is caused by buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...

D-Link DIR-868L Router Buffer Overflow

The vulnerability of the FUN0000acb4 function in D-Link DIR-868L router microprogramming software is caused by buffer overflow on the stack. Exploiting this vulnerability can allow a remote attacker to trigger buffer overflow...

D-Link DIR-605L Router Buffer Overflow

The vulnerability of D-Link DIR-605L router’s microprogramming software lies in the ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DIR-815 system DoS

The vulnerability of the web/captcha.cgi component of the D-Link DIR-815 router’s microprogramming system is caused by buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

D-Link DIR-3040 SetQuickVPNSettings Code Execution

The vulnerability of the SetQuickVPNSettings function in the D-Link DIR-3040 wireless router’s microprogramming software is related to the execution of an operation that goes beyond the buffer in memory as a result of executing the prog.cgi script. Exploiting this vulnerability allows a remote...

PT-2023-7509 · Atlassian +1 · Confluence +1

Name of the Vulnerable Software and Affected Versions: Apache Struts versions prior to 2.5.32 Apache Struts versions prior to 6.1.2.2 Apache Struts versions prior to 6.3.0.1 Confluence Data Center versions from 7.17.0 to 8.8.0 excluding 8.8.0 Confluence Data Center versions from 8.0.0 to 8.0.4...

dir-shop.cz Cross Site Scripting vulnerability OBB-3675066

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-39637

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

CVE-2023-39637

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

PT-2023-27041 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10 B05 Description: A command injection issue was discovered via the component /goform/Diagnosis. This allows for potential exploitation. Recommendations: For D-Link DIR-816 A2 version 1.10 B05, as a temporary...

CVE-2023-39637

CVE-2023-39637 affects D-Link DIR-816 A2 firmware 1.10 B05. The vulnerability is a command injection via the vulnerable component /goform/Diagnosis . CVSS-3.1 base metrics indicate network access, no privileges required, no user interaction, and high impact on confidentiality, integrity, and avai...

D-Link DIR-816 A2 Command Injection Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816 A2 version 1.10 B05, which originates from the component /goform/Diagnosis containing command injection...

CVE-2023-39637

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...

CVE-2023-39637: Improper Neutralization of Special Elements used in a Command

D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis...