10240 matches found
D-Link DIR-878 Stack Buffer Overflow Vulnerability
The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A stack buffer overflow vulnerability exists in prog.cgi in the D-Link DIR-878 version 1.30B08. An attacker can exploit this vulnerability without authentication based on a stack buffer overflow...
CVE-2020-27600
HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter...
CVE-2020-27600
HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter...
CVE-2021-30072
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication...
CVE-2021-30072
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication...
Stack overflow
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication...
CVE-2021-30072
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication...
CVE-2020-27600
This CVE affects D-Link DIR-846 routers (A1_100.26) where HNAP1/control/SetMasterWLanSettings.php allows remote command execution via shell metacharacters in the ssid0/ssid1 fields. The underlying issue is an OS command injection vulnerability enabling an attacker to run arbitrary commands on aff...
CVE-2020-27600
HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter...
CVE-2020-21590
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...
CVE-2020-21590
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...
CVE-2021-30072
The CVE-2021-30072 entry concerns the D-Link DIR-878 router (version 1.30B08) and affects the prog.cgi component. The root cause is a misused strcat leading to a stack-based buffer overflow, which can be exploited without authentication over the network. Exploitation details are not provided in t...
CVE-2021-30072
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication...
D-Link DIR-878 缓冲区错误漏洞
The D-Link DIR-878 is a wireless router from AUO D-Link of Taiwan, China. A stack buffer overflow vulnerability exists in prog.cgi in the D-Link DIR-878 version 1.30B08. An attacker can exploit this vulnerability without authentication based on a stack buffer overflow...
CVE-2020-21590: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter...
CVE-2020-27600: Improper Neutralization of Special Elements used in an OS Command
HNAP1/control/SetMasterWLanSettings.php in D-Link D-Link Router DIR-846 DIR-846 A1100.26 allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter...
PT-2021-11412
Name of the Vulnerable Software and Affected Versions: D-Link Router DIR-846 version A1 100.26 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the ssid0 or ssid1 parameter in the "HNAP1/control/SetMasterWLanSettings.php" endpoint...
PT-2021-10645
Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: The issue allows attackers to list files in arbitrary directories via the dir parameter in the coreframe/app/template/admin/index.php file. This is a directory traversal issue that can be exploited by...
CVE-2021-30072: Out-of-bounds Write
An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication...
PT-2021-18594
Name of the Vulnerable Software and Affected Versions D-Link DIR-878 version 1.30B08 Description An issue was discovered in prog.cgi where the misuse of strcat leads to a stack-based buffer overflow. This issue does not require authentication to be exploited. Recommendations For D-Link DIR-878...