PT-2021-11131

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version V1.0.2B05 Description: A command injection vulnerability was discovered in the HNAP1 protocol. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login...

CVE-2020-25368: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the PrivateLogin field to Login...

D-Link DIR-823G 命令注入漏洞

The D-Link DIR-823G is an AC1200M dual-band gigabit wireless router.A command injection vulnerability exists in the HNAP1 protocol of the D-Link DIR-823G version 1.0.2B05. The vulnerability can be exploited to execute arbitrary web scripts via shell meta characters in the PrivateLogin field of th...

PT-2021-5269

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G REVA1 version 1.02B05 Description The issue is related to the /cgi-bin/upload firmware.cgi component, which lacks authorization. This allows remote attackers to cause a denial of service DoS via unspecified vectors...

CVE-2020-25367: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via shell metacharacters in the Captcha field to Login...

D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability

D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution...

Unspecified Vulnerability in D-Link DIR-868L

The D-Link DIR-868L is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-868LW, which originates from errors such as configuration during operation of a network system or product. An unauthorized attacker could exploit the vulnerability to obtai...

The vulnerability of the web interface of the D-Link DIR-868LW router’s microprogramming software allows a hacker to obtain a record of user DNS requests.

The vulnerability of the web interface of D-Link DIR-868LW router software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to obtain user DNS query history...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

Authentication flaw

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-33259

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

CVE-2021-33259

The CVE-2021-33259 issue affects the D-Link DIR-868LW router (version 1.12b) where several web interfaces allow access without authentication. The root cause is a lack of authentication requirements for multiple web interfaces, enabling an attacker to view users’ DNS query history. Impact is expo...

PT-2021-4603

Name of the Vulnerable Software and Affected Versions D-Link DIR-868LW version 1.12b Description The issue is related to weaknesses in the authentication procedure of the D-Link DIR-868LW router's web interface. This allows a remote attacker to obtain users' DNS query history due to the lack of...

CVE-2021-33259: Missing Authentication for Critical Function

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

D-Link DIR-868L 访问控制错误漏洞

The D-Link DIR-868L is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-868LW, which originates from errors such as configuration during operation of a network system or product. An unauthorized attacker could exploit the vulnerability to obtai...

The vulnerability of the Telnet service of the D-Link DIR-868L router’s microprogramming system lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Telnet service provided by the D-Link DIR-868L router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Telnet service of the D-Link DIR-880L router’s microprogramming system lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Telnet service provided by the D-Link DIR-880L router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

[SECURITY] Fedora 34 Update: mediawiki-1.35.4-1.fc34

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki instances...

Authentication flaw

A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in D-Link DIR-X1560, v1.04B04, and DIR-X6060, v1.11B04 allows a remote unauthenticated attacker to disconnect a wireless client via sending specific spoofed SAE authentication frames...