PT-2021-4645

Name of the Vulnerable Software and Affected Versions D-LINK-DIR-615 B2 version 2.01mt D-Link DIR-615 Q1 affected versions not specified Description An information disclosure issue exists, allowing an attacker to obtain a user name and password by forging a post request to the "/getcfg.php" page...

PT-2021-6399

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to 1.03 RevA1 Description The issue is related to an information disclosure in the web interface of the affected device. It allows a remote unauthenticated attacker to send a specially crafted HTTP request to ga...

PT-2021-6122

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to v1.10WWB09 Beta Description The issue is related to a reflected cross-site-scripting attack in the web application of the D-Link DIR-X1860. This allows a remote unauthenticated attacker to execute code in the...

PT-2021-6117

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to v1.10WWB09 Beta Description The issue is related to a web application vulnerability in the D-Link DIR-X1860 Wi-Fi router's firmware, specifically concerning inadequate handling of HTTP requests. This can be...

D-Link DIR-2055 HNAP PrivateLogin incorrect authentication algorithm implements authentication bypass vulnerability

D-Link DIR-2055 is a router device. a security vulnerability exists in the D-Link DIR-2055 HNAP PrivateLogin authentication algorithm, which can be exploited by attackers to escalate privileges and execute arbitrary code in the router context...

D-Link DIR-2055 HNAP incorrect comparison verification bypass vulnerability

The D-Link DIR-2055 is a router device. a security vulnerability exists in the D-Link DIR-2055 HNAP, which can be exploited by attackers to execute arbitrary code on the router...

D-Link DIR-816 Command Execution Vulnerability (CNVD-2021-67516)

The D-Link DIR-816 is a wireless router from D-Link, Taiwan, China.The D-Link DIR-816 has a security vulnerability that could be exploited by attackers to execute arbitrary php code via the typename parameter...

D-Link DIR-816 Command Execution Vulnerability

D-Link DIR-816 is a wireless router from D-Link Taiwan, China.A security vulnerability exists in D-Link DIR-816A1FW101CNB04 750m11ac. The vulnerability is caused by a flaw in the handler function of the /goform/form2userconfig.cgi route. Through the use of HTTP request parameters, an attacker cou...

(0Day) D-Link DIR-2055 HNAP Incorrect Comparison Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2055 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of...

(0Day) D-Link DIR-2055 HNAP PrivateLogin Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-2055 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of...

CVE-2021-39509

An issue was discovered in D-Link DIR-816 DIR-816A2FWv1.10CNB05R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...

CVE-2021-39509

A command injection vulnerability exists in the D-Link DIR-816 (specifically model DIR-816A2 with firmware FWv1.10CNB05_R1B011D88210 ) due to improper neutralization of special elements used in a command. The HTTP request parameter used in the handler function of the /goform/form2userconfig.cgi r...

CVE-2021-39509

An issue was discovered in D-Link DIR-816 DIR-816A2FWv1.10CNB05R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...

CVE-2021-39509: Improper Neutralization of Special Elements used in a Command

An issue was discovered in D-Link DIR-816 DIR-816A2FWv1.10CNB05R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...

D-Link DIR816 命令注入漏洞

D-Link DIR-816 is a wireless router from D-Link Taiwan, China.A security vulnerability exists in D-Link DIR-816A1FW101CNB04 750m11ac. The vulnerability is caused by a flaw in the handler function of the /goform/form2userconfig.cgi route. Through the use of HTTP request parameters, an attacker cou...

D-Link DIR-816 命令注入漏洞

The D-Link DIR-816 is a wireless router from D-Link, Taiwan, China.The D-Link DIR-816 has a security vulnerability that could be exploited by attackers to execute arbitrary php code via the typename parameter...

D-Link DIR-816 A2 安全漏洞

The D-Link DIR-816 A2 is a wireless router from Taiwan, China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816A2, which stems from an issue discovered via the HTTP request parameter in the handler function of the goform form2userconfig.cgi route, where a username string can...

PT-2021-22599

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version DIR-816A2 FWv1.10CNB05 R1B011D88210 Description: An issue was discovered where the HTTP request parameter is used in the handler function of the "/goform/form2userconfig.cgi" route. This allows constructing the user nam...

Command Execution Vulnerability in DIR-846 at AUO Electronic Devices (Shanghai) Co.

The DIR-846 router is a wireless router product for users with gaming and video entertainment needs. A command execution vulnerability exists in the AUO Electronic Devices Shanghai Co. DIR-846, which can be exploited by an attacker to execute arbitrary code...

CVE-2021-29296

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take NULL as a first argument,...