10261 matches found
D-Link DIR-816 A2 router software Code Execution
The vulnerability of the /goform/Diagnosis component of D-Link DIR-816 A2 microprogrammed software lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
D-Link DIR-816 A2 Code Execution
The vulnerability of the /goform/DDNS component of D-Link DIR-816 A2 microprogramming software lies in the fact that it allows for code execution beyond buffer boundaries. Exploiting this vulnerability can enable a hacker to execute arbitrary code...
D-Link DIR-816 A2 Router Arbitrary Command Execution
The vulnerability of the /goform/form2systime.cgi microprogramming system for D-Link DIR-816 A2 exists due to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
D-Link DIR-809 A1/A2 Authentication Bypass
The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and download the configuration file remotely...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
Design/Logic Flaw
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
The CVE-2023-31814 entry concerns D-Link DIR-300 firmware and is tied to a file inclusion vulnerability in the script /model/__lang_msg.php. Affected devices are DIR-300 firmware versions <=REVA1.06 and
D-Link DIR-300 安全漏洞
The D-Link DIR-300 is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-300 REVA1.06 and earlier firmware versions, REVB2.06 and earlier firmware versions, which originates from an easy file inclusion attack via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814: Use of Incorrectly-Resolved Name or Reference
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
D-Link Multiple DIR Devices Multiple Vulnerabilities (Sep 2022)
Multiple D-Link DIR devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-2983 · D Link · D-Link Dir-846
Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 1.00A52 Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-846 router's firmware, specifically concerning the handling of the tomography ping address parameter. This can be...
D-Link DIR-868L Router Command Execution
The vulnerability of the SetClientInfoDemo.php script in the D-Link DIR-868L router microprogramming software exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute...
D-Link DIR-605L Stack Buffer Overflow Vulnerability
The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L version 1.17B01 BETA suffers from a stack buffer overflow vulnerability due to incorrect boundary checking in /goform/formTcpipSetup. An attacker could exploit this vulnerability to cause a buffer overflow and...
CVE-2023-27233: Improper Neutralization of Special Elements used in an SQL Command
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order0dir parameter at userlistbackend.php...
PT-2023-2929 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 13.6.0 Description: The issue is related to a lack of validation of XML object sequences in the user list backend.php script of the Piwigo content management system. This can be exploited by a remote attacker to condu...
