D-Link DIR-895L MFC 信息泄露漏洞

The D-Link DIR-895L MFC is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in DLink DIR-895L MFC v1.21b05, which stems from the fact that DIR-895L MFC v1.21b05 is prone to exposing credentials in the telnet service via decompilation of the...

D-Link DIR-880L 信息泄露漏洞

The AUO DIR-880L is a wireless AC1900 dual-band Gigabit cloud router. A credential disclosure vulnerability exists in the AUO DIR-880L version 1.07. An attacker can exploit this vulnerability by decompiling the firmware to access the firmware and extract sensitive data...

PT-2021-29165

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.271 Description The issue is related to the btrfs filesystem in the Linux Kernel. It involves a fix to prevent a BUG ON condition in the link to fixup dir function. The actual impact and potential for...

PT-2021-11663

Name of the Vulnerable Software and Affected Versions: DLink Router DIR-895L MFC version 1.21b05 Description: The issue allows an unauthenticated attacker to gain access to the firmware and extract sensitive data through credentials disclosure in the telnet service. This is possible by decompilin...

PT-2021-4491

Name of the Vulnerable Software and Affected Versions D-Link DIR-868L version 3.01 Description The issue concerns a credentials disclosure in the telnet service of the D-Link router DIR-868L. This is due to insufficient protection of registration data, which can be exploited through decompilation...

PT-2021-4492

Name of the Vulnerable Software and Affected Versions D-link router DIR-885L-MFC versions 1.15b02 through 1.21b05 Description The issue is related to insufficient protection of registration data in the telnet service of the D-link router DIR-885L-MFC, allowing an unauthenticated attacker to gain...

CVE-2020-29323: Insufficiently Protected Credentials

The D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...

CVE-2020-29324: Cleartext Storage of Sensitive Information

The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...

CVE-2020-29322: Insufficiently Protected Credentials

The D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data...

D-Link DIR-885L MFC 信息泄露漏洞

The D-Link DIR-885L MFC is a wireless router from AUO D-Link of Taiwan, China. An information disclosure vulnerability exists in the D-link DIR-885L-MFC 1.15b02, v1.21b05, which originates from the DIR-885L-MFC 1.15b02, v1.21b05 is prone to exposing credentials in the telnet service via...

403Fuzzer - Fuzz 403/401Ing Endpoints For Bypasses

Fuzz 403ing endpoints for bypasses Follow on twitter! @intrudir This tool will check the endpoint with a couple of headers such as X-Forwarded-For It will also apply different payloads typically used in dir traversals, path normalization etc. to each endpoint on the path. e.g. /%2e/test/test2...

PT-2021-19840

Name of the Vulnerable Software and Affected Versions @backstage/techdocs-common versions prior to 0.6.3 Description A malicious actor could read sensitive files from the environment where TechDocs documentation is built and published by setting a particular path for docs dir in mkdocs.yml. These...

VulnCheck KEV: CVE-2020-29557

D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution...

Backdoor.Win32.Tonerok.d Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/b297c565899ace88f40e5da833f41561.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Tonerok.d Vulnerability: Unauthenticated Remote Command Execution Description: The...

D-Link DIR-842 telnetd authentication anti-blast protection mechanism bypass vulnerability

D-Link DIR-842 is a home router manufactured by Taiwan Youxun Technology Co. The D-Link DIR-842 has a telnetd authentication anti-blast protection mechanism bypass vulnerability, which can be exploited by attackers to bypass the anti-violence cooling delay period via a time-based side channel...

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

Authentication flaw

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

CVE-2021-27342

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

CVE-2021-27342: Observable Discrepancy

An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack...

PT-2021-17405

Name of the Vulnerable Software and Affected Versions D-Link Router model DIR-842 version 3.0.2 Description The issue concerns an authentication brute-force protection mechanism bypass in the telnetd service. This bypass allows a remote attacker to circumvent the anti-brute-force cool-down delay...