PT-2022-2537 · D Link · D-Link Dir-882

Name of the Vulnerable Software and Affected Versions: D-link DIR-882 version A1 FW130B06 Description: A command injection issue was found in the /usr/bin/cli endpoint, related to the handling of symbolic links. This could allow a remote attacker to execute arbitrary commands due to inadequate da...

CVE-2021-43722

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...

CVE-2021-43722

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...

Buffer overflow

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...

CVE-2021-43722

CVE-2021-43722 affects D-Link DIR-645 (firmware v1.03 A1). The hnap_main function in the cgibin handler uses sprintf to format the soapaction header onto the stack without size limit, causing a stack-based buffer overflow. CVSS data from NVD/OpenVAS indicate a high/critical impact when exploited ...

CVE-2021-43722

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...

CVE-2022-26670

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

CVE-2021-43722: Out-of-bounds Write

D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnapmain function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size...

PT-2022-11894

Name of the Vulnerable Software and Affected Versions D-Link DIR-645 version 1.03 A1 Description The issue is related to a Buffer Overflow. The hnap main function in the cgibin handler uses sprintf to format the soapaction header onto the stack and has no limit on the size. Recommendations For...

PT-2022-2788

Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version affected versions not specified Description The issue exists due to inadequate filtering for special characters in the webpage input field, allowing an unauthenticated LAN attacker to perform a command injection attack...

CVE-2022-27772

CVE-2022-27772 : Spring Boot before v2.2.11.RELEASE is vulnerable to temporary directory hijacking via the method org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir. A local attacker could leverage this to escalate privileges or take over the application, as de...

CVE-2022-27772

spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only affects products and/or versions that...

D-Link Dir-820L Remote Command Execution Vulnerability

D-Link Dir-820L is a dual-band wireless router from China's Youxun D-Link.D-Link DIR-820L 1.05B03 has a security vulnerability, and no details of the vulnerability are available...

CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...

CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...

Command injection

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...

The vulnerability of the web interface of D-Link DIR-X1860 Wi-Fi routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface of D-Link DIR-X1860 Wi-Fi routers is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTTP request...

CVE-2022-26258

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2022-26258: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-820L 1.05B03 was discovered to contain remote command execution RCE vulnerability via HTTP POST to get set ccp...

CVE-2022-26258

CVE-2022-26258 affects D-Link DIR-820L devices (firmware around 1.05B03). Multiple open‑source scanners and NVD entries describe a remote code execution (RCE) vulnerability in this model, with initial reports citing an RCE via HTTP POST to get set ccp and separate notes of an RCE via the Device N...