Denial of Service Vulnerability in DIR-878 AC1900 MU-MIMO Dual Band Gigabit Wireless Router

AUO Electronic Devices Shanghai Co., Ltd. provides high-quality network solutions for consumers and businesses of all sizes. A denial of service vulnerability exists in the DIR-878 AC1900 MU-MIMO Dual Band Gigabit Wireless Router. An attacker can exploit this vulnerability to cause a denial of...

Trojan.Win32.Gentee.b Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/86e63bb63f3baf48ad3bf24c3f5b7e40.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Gentee.b Vulnerability: Insecure Permissions EoP Description: Trojan creates a vuln dir...

PT-2021-5244

Name of the Vulnerable Software and Affected Versions D-Link DIR-2640-US version 1.01B04 Description The issue is related to insufficiently protected credentials. The D-Link AC2600 DIR-2640 stores the device system account password in plain text and does not utilize Linux user management...

PT-2021-17125

Name of the Vulnerable Software and Affected Versions wpDataTables versions prior to 3.4.1 Description The issue is related to how wpDataTables handles order direction for server-side tables, leading to a SQL injection. This can be exploited through the "admin-ajax.php?action=get wdtable" endpoin...

CVE-2021-26754: Improper Neutralization of Special Elements used in an SQL Command

wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=getwdtable order0dir SQL injection...

D-Link DIR-825 Buffer Overflow Vulnerability

The D-Link DIR-825 is a router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in D-Link DIR-825 R1 devices 3.0.1 and earlier versions, which originates from a buffer overflow in the web interface and can be exploited by an attacker to achieve remote code execution prior ...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

Buffer overflow

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

The CVE-2020-29557 issue affects D-Link DIR-825 R1 devices with firmware up to 3.0.1 (pre-2020-11-20). A buffer overflow in the web interface enables pre-authentication remote code execution, i.e., an unauthenticated attacker could run arbitrary commands on the device. Related sources (OpenVAS NA...

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8 when there is an NFS export of a subdirectory of a filesystem allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior

...

D-Link DIR-825 缓冲区错误漏洞

The D-Link DIR-825 is a router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in D-Link DIR-825 R1 devices 3.0.1 and earlier versions, which originates from a buffer overflow in the web interface and can be exploited by an attacker to achieve remote code execution prior ...

CVE-2020-29557: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

Backdoor.Win32.Jokerdoor Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/6c7b364dafe0560dfb15c9b03f1b44bd.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jokerdoor TDC Mail Spy 1.0 Vulnerability: Insecure Permissions Description: This...

Backdoor.Win32.Whisper.b Remote Stack Corruption

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/a0edb91f62c8c083ec35b32a922168d1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Whisper.b Vulnerability: Remote Stack Corruption Description: Whisper.b listens on TC...

CVE-2021-3178

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attac...

Denial of Service Vulnerability in DIR-878 at AUO Electronic Devices (Shanghai) Co.

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A denial of service vulnerability exists in DIR-878 of AUO Electronic Devices Shanghai Ltd. that can be exploited by attackers to cause a denial of...